General

  • Target

    e2743528218828389b5ff627e39b473f_JaffaCakes118

  • Size

    58KB

  • Sample

    240915-pdcxxatflq

  • MD5

    e2743528218828389b5ff627e39b473f

  • SHA1

    e59f82454e9a7e96bc4418351f95013d1bfb203a

  • SHA256

    cd2cd6754e65539becaab7332ae533ac5821fa06066f9c17364527c9b4ff68dc

  • SHA512

    5841f40449ed32443b0305d2e00b38f67f6640e0c062f43d1f33b6b33e06833083db270f659a6b49355e8e9dea3f7a5fed53dd211d88afecc2cc7d26c4af0f00

  • SSDEEP

    768:rm3mlx/JXbQDDtlRV+ogZQTaYgiwykjOIG/PqD5LNjem4Wazh8OwSyj0AzjVjpQY:rm3gKlCbiW9yFn8fsNGj0YUlVW9N

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      e2743528218828389b5ff627e39b473f_JaffaCakes118

    • Size

      58KB

    • MD5

      e2743528218828389b5ff627e39b473f

    • SHA1

      e59f82454e9a7e96bc4418351f95013d1bfb203a

    • SHA256

      cd2cd6754e65539becaab7332ae533ac5821fa06066f9c17364527c9b4ff68dc

    • SHA512

      5841f40449ed32443b0305d2e00b38f67f6640e0c062f43d1f33b6b33e06833083db270f659a6b49355e8e9dea3f7a5fed53dd211d88afecc2cc7d26c4af0f00

    • SSDEEP

      768:rm3mlx/JXbQDDtlRV+ogZQTaYgiwykjOIG/PqD5LNjem4Wazh8OwSyj0AzjVjpQY:rm3gKlCbiW9yFn8fsNGj0YUlVW9N

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks