General

  • Target

    d13152917c0707af6725699cdbdbe9ca_JaffaCakes118

  • Size

    94KB

  • Sample

    240907-gayffaxdnm

  • MD5

    d13152917c0707af6725699cdbdbe9ca

  • SHA1

    a312a91701ec5bc62ff6e3312d29172328253264

  • SHA256

    7b14187978517b0b844af26590aabda8e0e35ec673c4314538ac837385945cdd

  • SHA512

    b194e8a174301e91932ec8789c12bbac3073ba4f9b45e89cb0b9297ae081f3d77c5520ad420b915f276be24697de038e76c09631dcc9effc98f3d55e6372aec1

  • SSDEEP

    1536:XLaEeMA2CNkm0XU4ZX4eFuZwaR4mm2ntGwizYXgTO3FV6IDQ/ABbr:cMA5kPXwEGGm7tVdGOVV6cV

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      d13152917c0707af6725699cdbdbe9ca_JaffaCakes118

    • Size

      94KB

    • MD5

      d13152917c0707af6725699cdbdbe9ca

    • SHA1

      a312a91701ec5bc62ff6e3312d29172328253264

    • SHA256

      7b14187978517b0b844af26590aabda8e0e35ec673c4314538ac837385945cdd

    • SHA512

      b194e8a174301e91932ec8789c12bbac3073ba4f9b45e89cb0b9297ae081f3d77c5520ad420b915f276be24697de038e76c09631dcc9effc98f3d55e6372aec1

    • SSDEEP

      1536:XLaEeMA2CNkm0XU4ZX4eFuZwaR4mm2ntGwizYXgTO3FV6IDQ/ABbr:cMA5kPXwEGGm7tVdGOVV6cV

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks