General

  • Target

    dd99ef77ad4f49ddc0f9a50e9384fb81_JaffaCakes118

  • Size

    50KB

  • Sample

    240913-eajwyasdqj

  • MD5

    dd99ef77ad4f49ddc0f9a50e9384fb81

  • SHA1

    1af61200d602e6253daa95a5fe6c181a9e8680de

  • SHA256

    9b8c85e7fd1fed70906af452714142b67351279c8adf2a39525613df86b8d8c0

  • SHA512

    65403dfc1969de9f35a7720e5e77d7574747d9cf757343d9eb2aca9cfa110d0f8c3cfffb0da6edfb4f6531a68b027f9d7f37bb58c2c094662b66a0a19ae394a8

  • SSDEEP

    768:VnHQF1YCzsFmvrPaNqVPJKW3cEoxgtLPILaNilcpXcKpUu5ovyavoc:xw5bzJPYm1P8a82phpUYiya

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      dd99ef77ad4f49ddc0f9a50e9384fb81_JaffaCakes118

    • Size

      50KB

    • MD5

      dd99ef77ad4f49ddc0f9a50e9384fb81

    • SHA1

      1af61200d602e6253daa95a5fe6c181a9e8680de

    • SHA256

      9b8c85e7fd1fed70906af452714142b67351279c8adf2a39525613df86b8d8c0

    • SHA512

      65403dfc1969de9f35a7720e5e77d7574747d9cf757343d9eb2aca9cfa110d0f8c3cfffb0da6edfb4f6531a68b027f9d7f37bb58c2c094662b66a0a19ae394a8

    • SSDEEP

      768:VnHQF1YCzsFmvrPaNqVPJKW3cEoxgtLPILaNilcpXcKpUu5ovyavoc:xw5bzJPYm1P8a82phpUYiya

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks