General

  • Target

    ed1d2ec94052a01a82dc41386c67fa95_JaffaCakes118

  • Size

    58KB

  • Sample

    240920-jd1q3svfne

  • MD5

    ed1d2ec94052a01a82dc41386c67fa95

  • SHA1

    26b80c542713e53d2258ea3b271c4c9a3e1e1147

  • SHA256

    0c24602274c0afda05197250336fbecd64a2afef887a39f3a714acf727e28c52

  • SHA512

    90a3a7eae17f5c0d8d37ffcc408f1790b6e08bda43b51fb0491f35ab03627f9ac6ceb43b6db5ffe8363eccb83f027aecff587a76427889008d3f265e070e330c

  • SSDEEP

    1536:Oihz0DewjEXWfCDIM/V5xtezEsi8OUM+tfNaIZEpqpXouv:Oihz0DewjEXWfCDIM/V5xtezEsi8OUMu

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://www.psicheaurora.it/fanta/download.php

Targets

    • Target

      ed1d2ec94052a01a82dc41386c67fa95_JaffaCakes118

    • Size

      58KB

    • MD5

      ed1d2ec94052a01a82dc41386c67fa95

    • SHA1

      26b80c542713e53d2258ea3b271c4c9a3e1e1147

    • SHA256

      0c24602274c0afda05197250336fbecd64a2afef887a39f3a714acf727e28c52

    • SHA512

      90a3a7eae17f5c0d8d37ffcc408f1790b6e08bda43b51fb0491f35ab03627f9ac6ceb43b6db5ffe8363eccb83f027aecff587a76427889008d3f265e070e330c

    • SSDEEP

      1536:Oihz0DewjEXWfCDIM/V5xtezEsi8OUM+tfNaIZEpqpXouv:Oihz0DewjEXWfCDIM/V5xtezEsi8OUMu

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks