General

  • Target

    de973deed1361a058987f0d0d24c571e_JaffaCakes118

  • Size

    67KB

  • Sample

    240913-wawn6szaqj

  • MD5

    de973deed1361a058987f0d0d24c571e

  • SHA1

    0494c4b056432ec1cd7d27c5e284ab67f02c8594

  • SHA256

    444737fe64ba9cd2af155fc6fd85d16fea2df003b75149cf658777bd2a047325

  • SHA512

    9536762594e3c16a4063101f92666bb440dfce2aecc41a40de81f5907159ddddb53738a4e9676b67d8e8e96740436bc2bd5e0e8805792e4e693ccb753a6ffc3b

  • SSDEEP

    1536:b3TMb1FpPtYZdqgmkLbxtmMaf2vmibksnouy8UO:zeLpPtckUGf7idout

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.6:51348

Targets

    • Target

      de973deed1361a058987f0d0d24c571e_JaffaCakes118

    • Size

      67KB

    • MD5

      de973deed1361a058987f0d0d24c571e

    • SHA1

      0494c4b056432ec1cd7d27c5e284ab67f02c8594

    • SHA256

      444737fe64ba9cd2af155fc6fd85d16fea2df003b75149cf658777bd2a047325

    • SHA512

      9536762594e3c16a4063101f92666bb440dfce2aecc41a40de81f5907159ddddb53738a4e9676b67d8e8e96740436bc2bd5e0e8805792e4e693ccb753a6ffc3b

    • SSDEEP

      1536:b3TMb1FpPtYZdqgmkLbxtmMaf2vmibksnouy8UO:zeLpPtckUGf7idout

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks