General
-
Target
0d0320878946a73749111e6c94bf1525_JaffaCakes118
-
Size
120KB
-
Sample
240502-a24m7sea65
-
MD5
0d0320878946a73749111e6c94bf1525
-
SHA1
1e9b5c685640df11659aea7748d9bf3df70aadcf
-
SHA256
34a542356ac8a3f6e367c6827b728e18e905c71574b3813f163e043f70aa3bfa
-
SHA512
fc695dd905213d7b623d33d2fa9302399897970f3b8705182fa50e771dad13dac5d5d302a508cdc4f3fdb37122999f2d492188667b92050fe49a29abff53a8b1
-
SSDEEP
3072:UXRbYXL8o0Quhon01KRTjKB4phUQbAnL0e2gF7wUg4GR:UXl6LcheTW+bZbwphOr
Behavioral task
behavioral1
Sample
0d0320878946a73749111e6c94bf1525_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d0320878946a73749111e6c94bf1525_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Targets
-
-
Target
0d0320878946a73749111e6c94bf1525_JaffaCakes118
-
Size
120KB
-
MD5
0d0320878946a73749111e6c94bf1525
-
SHA1
1e9b5c685640df11659aea7748d9bf3df70aadcf
-
SHA256
34a542356ac8a3f6e367c6827b728e18e905c71574b3813f163e043f70aa3bfa
-
SHA512
fc695dd905213d7b623d33d2fa9302399897970f3b8705182fa50e771dad13dac5d5d302a508cdc4f3fdb37122999f2d492188667b92050fe49a29abff53a8b1
-
SSDEEP
3072:UXRbYXL8o0Quhon01KRTjKB4phUQbAnL0e2gF7wUg4GR:UXl6LcheTW+bZbwphOr
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-