Overview

overview

10

Static

static

10

f5c996dea1...18.exe

windows7-x64

10

f5c996dea1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5c996dea16972ed0adc764a919eb546_JaffaCakes118

  • Size

    65KB

  • Sample

    240417-pvhjqafc82

  • MD5

    f5c996dea16972ed0adc764a919eb546

  • SHA1

    4ac02ffec612538e7f0f8ea3454070d395846fcd

  • SHA256

    e80114bfdb827695374891a6f8f1b6a0915040545815656090fdbbaf1b1df47c

  • SHA512

    ca928882b0553fb12299872e7112736b2bcc538e291d2c80f68b335763ba1e4b3c2d6a915039a576bfdbc2ed5922f011a7afe2398fda9d2e28c9d9b47560eb9d

  • SSDEEP

    1536:mR3dGGAtZ+HHWahiXYG75IS0b8+CV7nO:IdG3sHGXD5t0b8+CxO

Score
10/10
metasploitbackdoorpersistencetrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      f5c996dea16972ed0adc764a919eb546_JaffaCakes118

    • Size

      65KB

    • MD5

      f5c996dea16972ed0adc764a919eb546

    • SHA1

      4ac02ffec612538e7f0f8ea3454070d395846fcd

    • SHA256

      e80114bfdb827695374891a6f8f1b6a0915040545815656090fdbbaf1b1df47c

    • SHA512

      ca928882b0553fb12299872e7112736b2bcc538e291d2c80f68b335763ba1e4b3c2d6a915039a576bfdbc2ed5922f011a7afe2398fda9d2e28c9d9b47560eb9d

    • SSDEEP

      1536:mR3dGGAtZ+HHWahiXYG75IS0b8+CV7nO:IdG3sHGXD5t0b8+CxO

    Score
    10/10
    metasploitbackdoorpersistencetrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks