General

  • Target

    daf8d641653ce1030e282c3bc25d50e5_JaffaCakes118

  • Size

    72KB

  • Sample

    240911-w5f7zawarq

  • MD5

    daf8d641653ce1030e282c3bc25d50e5

  • SHA1

    f2ecf1ff9249be61c68e6f0daac4d72a15a54bdc

  • SHA256

    909eac256f86defad5e8acbb6d12f04e6626ce81f170a86d466d8030bb7799e2

  • SHA512

    d28a6f0a7d8fed02840b890d15d8da611bc797760dad1d67598cfc082ecd7ef35959874cfde318d8736ce5eb53bd9af9a03de444a0c4a18baa7a0469ba7a2674

  • SSDEEP

    1536:I3yyeWGZ19wLQS4xSptl6ULrmLaDtPMb+KR0Nc8QsJq39:5mUvwLQjc0SrJRPe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      daf8d641653ce1030e282c3bc25d50e5_JaffaCakes118

    • Size

      72KB

    • MD5

      daf8d641653ce1030e282c3bc25d50e5

    • SHA1

      f2ecf1ff9249be61c68e6f0daac4d72a15a54bdc

    • SHA256

      909eac256f86defad5e8acbb6d12f04e6626ce81f170a86d466d8030bb7799e2

    • SHA512

      d28a6f0a7d8fed02840b890d15d8da611bc797760dad1d67598cfc082ecd7ef35959874cfde318d8736ce5eb53bd9af9a03de444a0c4a18baa7a0469ba7a2674

    • SSDEEP

      1536:I3yyeWGZ19wLQS4xSptl6ULrmLaDtPMb+KR0Nc8QsJq39:5mUvwLQjc0SrJRPe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks