General

  • Target

    dd986a9e0325a8c07f5f44733a8a23e7_JaffaCakes118

  • Size

    58KB

  • Sample

    240913-d79yysscpj

  • MD5

    dd986a9e0325a8c07f5f44733a8a23e7

  • SHA1

    15112a9355e82e892c35ea2fcd3515652067d2fb

  • SHA256

    e5106f71b4b45225db98978824b4cce565ded15d793d95afeed8272eef83f1e1

  • SHA512

    55263d1aee691cfd090b6fe0e00615601b43394a90e4ab615cf3c2a2094298b88e4fdca3803feb578f4b1f094935bd92a021a03279f5b3e0e7720847bfe4560d

  • SSDEEP

    1536:JfWurKlsAiIWTiQalq7B7ccx2m1c5lkD:JNrqsAVWTocccx2m1c5lkD

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      dd986a9e0325a8c07f5f44733a8a23e7_JaffaCakes118

    • Size

      58KB

    • MD5

      dd986a9e0325a8c07f5f44733a8a23e7

    • SHA1

      15112a9355e82e892c35ea2fcd3515652067d2fb

    • SHA256

      e5106f71b4b45225db98978824b4cce565ded15d793d95afeed8272eef83f1e1

    • SHA512

      55263d1aee691cfd090b6fe0e00615601b43394a90e4ab615cf3c2a2094298b88e4fdca3803feb578f4b1f094935bd92a021a03279f5b3e0e7720847bfe4560d

    • SSDEEP

      1536:JfWurKlsAiIWTiQalq7B7ccx2m1c5lkD:JNrqsAVWTocccx2m1c5lkD

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks