General

  • Target

    887678ef24d49e1372a5e1fda9ff4a90_JaffaCakes118

  • Size

    41KB

  • Sample

    240811-bwb7fasgkd

  • MD5

    887678ef24d49e1372a5e1fda9ff4a90

  • SHA1

    fa4ccd185c1c2cf0d60f026017cd482eb39282e1

  • SHA256

    af36185b2436c865b8ab87e0df0b768ace95606761a1d4207f56f77135581347

  • SHA512

    94c49a1a7bd146beca5c0e6b7927793794c55711d87293cfb8c1893162a977fda195749e4aeda216f94b19fdf6974ff4177dabc31aab9d3cef79ec8a11d3d6ff

  • SSDEEP

    768:3uCkdC2D5z4oWV0OCAB4Rld8Inv47Y5vJfhvESU:3jkdjl8WK4RP84vkY/f6

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      887678ef24d49e1372a5e1fda9ff4a90_JaffaCakes118

    • Size

      41KB

    • MD5

      887678ef24d49e1372a5e1fda9ff4a90

    • SHA1

      fa4ccd185c1c2cf0d60f026017cd482eb39282e1

    • SHA256

      af36185b2436c865b8ab87e0df0b768ace95606761a1d4207f56f77135581347

    • SHA512

      94c49a1a7bd146beca5c0e6b7927793794c55711d87293cfb8c1893162a977fda195749e4aeda216f94b19fdf6974ff4177dabc31aab9d3cef79ec8a11d3d6ff

    • SSDEEP

      768:3uCkdC2D5z4oWV0OCAB4Rld8Inv47Y5vJfhvESU:3jkdjl8WK4RP84vkY/f6

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks