Overview

overview

10

Static

static

8

ebee2913b3...8.xlsm

windows7-x64

10

ebee2913b3...8.xlsm

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebee2913b331bf90c3812bd8fd445120_JaffaCakes118

  • Size

    327KB

  • Sample

    241213-rrc6ya1lfx

  • MD5

    ebee2913b331bf90c3812bd8fd445120

  • SHA1

    8fc2f42502baf00750cb3dd11867854007862c49

  • SHA256

    437d674579de5ae68e8d07fd19c5a7fbc699af6e638933ed40df364616da6c9c

  • SHA512

    345987b073194c79de25f7a785938fc50d353a49f0f6c917f5fc725fa53647de93ac1df415055580d1f55baf779301524ffd3a9efa5da984ddc82ee24757313d

  • SSDEEP

    6144:QJ9HMInvpPbR/5L4YvQ6bgcsEEmi+efMi0oGM1Okn6kovIbvpHIjRYvMdTq:QJ9tRbtp4Wl8cnEQeNGkr6kdFoeYW

Score
10/10
discoverymacroxlm

Malware Config

Targets

    • Target

      ebee2913b331bf90c3812bd8fd445120_JaffaCakes118

    • Size

      327KB

    • MD5

      ebee2913b331bf90c3812bd8fd445120

    • SHA1

      8fc2f42502baf00750cb3dd11867854007862c49

    • SHA256

      437d674579de5ae68e8d07fd19c5a7fbc699af6e638933ed40df364616da6c9c

    • SHA512

      345987b073194c79de25f7a785938fc50d353a49f0f6c917f5fc725fa53647de93ac1df415055580d1f55baf779301524ffd3a9efa5da984ddc82ee24757313d

    • SSDEEP

      6144:QJ9HMInvpPbR/5L4YvQ6bgcsEEmi+efMi0oGM1Okn6kovIbvpHIjRYvMdTq:QJ9tRbtp4Wl8cnEQeNGkr6kdFoeYW

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks