Overview

overview

10

Static

static

8

ed97ee2d08...18.doc

windows7-x64

10

ed97ee2d08...18.doc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed97ee2d08454ed55047538abd393544_JaffaCakes118

  • Size

    178KB

  • Sample

    240920-pqstwswfkb

  • MD5

    ed97ee2d08454ed55047538abd393544

  • SHA1

    fe69c392b19223592be202974552818de8abd2a9

  • SHA256

    256e95b41be42509e33cfd8730065c8ba6722d46523518a41f605169ce22de69

  • SHA512

    a0c24a1015c5fe7eae785893c76da3073687e3d2eb8e72e7db73ee043c84c2207ee535620e133bb1ec167045fc1fec6607d057c9813d42d7c76c5ebee5813fc6

  • SSDEEP

    1536:4DNVczHkD9icmT+FFdZ+a9BGy4+qiQSLxSBAN0Zg+Zfg9ZchEZP5dIHwMa1vgwKQ:4Dn/iKFf4uOZ6wMwU1cUScys/GO

Score
10/10
discoverymacromacro_on_action

Malware Config

Targets

    • Target

      ed97ee2d08454ed55047538abd393544_JaffaCakes118

    • Size

      178KB

    • MD5

      ed97ee2d08454ed55047538abd393544

    • SHA1

      fe69c392b19223592be202974552818de8abd2a9

    • SHA256

      256e95b41be42509e33cfd8730065c8ba6722d46523518a41f605169ce22de69

    • SHA512

      a0c24a1015c5fe7eae785893c76da3073687e3d2eb8e72e7db73ee043c84c2207ee535620e133bb1ec167045fc1fec6607d057c9813d42d7c76c5ebee5813fc6

    • SSDEEP

      1536:4DNVczHkD9icmT+FFdZ+a9BGy4+qiQSLxSBAN0Zg+Zfg9ZchEZP5dIHwMa1vgwKQ:4Dn/iKFf4uOZ6wMwU1cUScys/GO

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • An obfuscated cmd.exe command-line is typically used to evade detection.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks