General

  • Target

    dc427791e81431e5eab9c6e072ed94e5_JaffaCakes118

  • Size

    444KB

  • Sample

    240912-n2aa9atfnh

  • MD5

    dc427791e81431e5eab9c6e072ed94e5

  • SHA1

    1df14b659a5e829d8b1f1e1d4ff75993c44fbe73

  • SHA256

    446d3c84a4f26f361369952cc8b34948a2029fe3d5c801232fc3a492f173b384

  • SHA512

    e33dce1854dccbf53f5f63ccbc11beedfcce76531a649d05e783f2fa8998854598ad89c8b312d53b83d3f2dbc96c5a330678576f88e492d3431781969ca7dd58

  • SSDEEP

    12288:MWPFbQ9J3ooveuhL8XrEZwvbYCwQMQn6:5bQL7vVt6rEKzMM6

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      dc427791e81431e5eab9c6e072ed94e5_JaffaCakes118

    • Size

      444KB

    • MD5

      dc427791e81431e5eab9c6e072ed94e5

    • SHA1

      1df14b659a5e829d8b1f1e1d4ff75993c44fbe73

    • SHA256

      446d3c84a4f26f361369952cc8b34948a2029fe3d5c801232fc3a492f173b384

    • SHA512

      e33dce1854dccbf53f5f63ccbc11beedfcce76531a649d05e783f2fa8998854598ad89c8b312d53b83d3f2dbc96c5a330678576f88e492d3431781969ca7dd58

    • SSDEEP

      12288:MWPFbQ9J3ooveuhL8XrEZwvbYCwQMQn6:5bQL7vVt6rEKzMM6

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks