General

  • Target

    d61108c568048095c53355aa8c299b6d_JaffaCakes118

  • Size

    72KB

  • Sample

    240909-lrm39athre

  • MD5

    d61108c568048095c53355aa8c299b6d

  • SHA1

    b9a868ae70e5b07f1a6b2995a6d59fbeca548fe5

  • SHA256

    90823d76e9810e3b7a6a28780627b03c2133721e9fa206ce4e864c876ee1df70

  • SHA512

    2c17ec86430304d1d525fb7a52511a9d9aae035b94cc639d865690852373816f43db86689710cc104bdc0bd0bad3c4a36c8d7e738685a96b8c7a1ad0279a72eb

  • SSDEEP

    1536:IuGQ949Zsz5BMzzjZUYRiSx1gPSMb+KR0Nc8QsJq39:7GQ9JkzmCFx6PSe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      d61108c568048095c53355aa8c299b6d_JaffaCakes118

    • Size

      72KB

    • MD5

      d61108c568048095c53355aa8c299b6d

    • SHA1

      b9a868ae70e5b07f1a6b2995a6d59fbeca548fe5

    • SHA256

      90823d76e9810e3b7a6a28780627b03c2133721e9fa206ce4e864c876ee1df70

    • SHA512

      2c17ec86430304d1d525fb7a52511a9d9aae035b94cc639d865690852373816f43db86689710cc104bdc0bd0bad3c4a36c8d7e738685a96b8c7a1ad0279a72eb

    • SSDEEP

      1536:IuGQ949Zsz5BMzzjZUYRiSx1gPSMb+KR0Nc8QsJq39:7GQ9JkzmCFx6PSe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks