Overview

overview

8

Static

static

8

JaffaCakes...e8.doc

windows7-x64

5

JaffaCakes...e8.doc

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8c0ee5ba0f92c3926828f153eb6529e8

  • Size

    55KB

  • Sample

    250329-vpg9nasjt4

  • MD5

    8c0ee5ba0f92c3926828f153eb6529e8

  • SHA1

    423f523c88b3a9ac7c2f9847da7e40e5b74e9dda

  • SHA256

    8807c6374f31760a47bd677a32e2bea4e997534fa93ffc146ac07edf4827372a

  • SHA512

    a039f51e5fd336f5773b243e23571c6d0c739ff42279c69d2bcb5be691986f9449b327ebcd1121faa70b86987ccdd5f40266fb538527be48df0b5f5a6c2a01db

  • SSDEEP

    384:kM8EOmlI6mU4Q5kMsDW9DSiX7z72Rz5of8ScQQ8E6z6Aq2XYMv6kkqv5mQLa9:kREOmaBW9D5zFELGYdBqv5mQL

Score
8/10
discoverymacromacro_on_action

Malware Config

Targets

    • Target

      JaffaCakes118_8c0ee5ba0f92c3926828f153eb6529e8

    • Size

      55KB

    • MD5

      8c0ee5ba0f92c3926828f153eb6529e8

    • SHA1

      423f523c88b3a9ac7c2f9847da7e40e5b74e9dda

    • SHA256

      8807c6374f31760a47bd677a32e2bea4e997534fa93ffc146ac07edf4827372a

    • SHA512

      a039f51e5fd336f5773b243e23571c6d0c739ff42279c69d2bcb5be691986f9449b327ebcd1121faa70b86987ccdd5f40266fb538527be48df0b5f5a6c2a01db

    • SSDEEP

      384:kM8EOmlI6mU4Q5kMsDW9DSiX7z72Rz5of8ScQQ8E6z6Aq2XYMv6kkqv5mQLa9:kREOmaBW9D5zFELGYdBqv5mQL

    Score
    8/10
    discoverymacromacro_on_action

    • Office macro that triggers on suspicious action

      Office document macro which triggers in special circumstances - often malicious.

      macromacro_on_action

    • Deletes itself

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks