Overview

overview

10

Static

static

8

3b98c8f19f...8.xlsm

windows7-x64

10

3b98c8f19f...8.xlsm

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3b98c8f19fa8ef1a983993583404bfb5_JaffaCakes118

  • Size

    343KB

  • Sample

    241012-xq3m4a1all

  • MD5

    3b98c8f19fa8ef1a983993583404bfb5

  • SHA1

    70fe7e250b473372ad17f17fb902ff73d80e305a

  • SHA256

    eae610deff801aea6770df4e215507f7b6d80c7a22195b3c45ef152caba492b9

  • SHA512

    dae2c343cfbf3bdbae74d759d7c00f8bc54a140fffdd348edeca31a61c7f54fabd9d86fe97d7fab2f16e8e0ddd9dfb3bdf23bb29b94492aac41bfd22b3595b2c

  • SSDEEP

    6144:QX9HMInvpPbR/5L4YvQ6bgcsEEmi+efMi0oGNzx9KeqCp9rvOIFtdh:QX9tRbtp4Wl8cnEQeNGBClCbFnh

Score
10/10
discoverymacroxlm

Malware Config

Targets

    • Target

      3b98c8f19fa8ef1a983993583404bfb5_JaffaCakes118

    • Size

      343KB

    • MD5

      3b98c8f19fa8ef1a983993583404bfb5

    • SHA1

      70fe7e250b473372ad17f17fb902ff73d80e305a

    • SHA256

      eae610deff801aea6770df4e215507f7b6d80c7a22195b3c45ef152caba492b9

    • SHA512

      dae2c343cfbf3bdbae74d759d7c00f8bc54a140fffdd348edeca31a61c7f54fabd9d86fe97d7fab2f16e8e0ddd9dfb3bdf23bb29b94492aac41bfd22b3595b2c

    • SSDEEP

      6144:QX9HMInvpPbR/5L4YvQ6bgcsEEmi+efMi0oGNzx9KeqCp9rvOIFtdh:QX9tRbtp4Wl8cnEQeNGBClCbFnh

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks