General

  • Target

    d792b62e43f8fe7190cdc22d47d8bb8a_JaffaCakes118

  • Size

    48KB

  • Sample

    240910-ewn3sawfmp

  • MD5

    d792b62e43f8fe7190cdc22d47d8bb8a

  • SHA1

    627b0ffa840e461b7dda865f8ccf00e3901c0f1c

  • SHA256

    357a652bb5abd25a30c8d220423202e082009c00e22361e15403ed48c9c2a1ee

  • SHA512

    f368b7cbc9b056c647e2811eed8a1539cd6503b4d79aa817b13f095ff28a1236bd4653fa246500da0cbf47b94478750e6524ddc6224d734038f2c29185846668

  • SSDEEP

    768:SrkxTmRpxk6qF0LFBBBpH4RwHRiDvwKsi5yeH8UHsvA/w+dUf9Ny:SrkxTmRDZdjB3H4RkitL5yeF6v

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      d792b62e43f8fe7190cdc22d47d8bb8a_JaffaCakes118

    • Size

      48KB

    • MD5

      d792b62e43f8fe7190cdc22d47d8bb8a

    • SHA1

      627b0ffa840e461b7dda865f8ccf00e3901c0f1c

    • SHA256

      357a652bb5abd25a30c8d220423202e082009c00e22361e15403ed48c9c2a1ee

    • SHA512

      f368b7cbc9b056c647e2811eed8a1539cd6503b4d79aa817b13f095ff28a1236bd4653fa246500da0cbf47b94478750e6524ddc6224d734038f2c29185846668

    • SSDEEP

      768:SrkxTmRpxk6qF0LFBBBpH4RwHRiDvwKsi5yeH8UHsvA/w+dUf9Ny:SrkxTmRDZdjB3H4RkitL5yeF6v

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks