General

  • Target

    e61b900edf71faae6651386821c9c38d_JaffaCakes118

  • Size

    57KB

  • Sample

    240917-fsqmwaweql

  • MD5

    e61b900edf71faae6651386821c9c38d

  • SHA1

    0c426a33674cb2f11d9e77ccdf5461800004eec5

  • SHA256

    440a6fe3dce364d067328d92e8437f3ac798ad3b1b00f4d28f685b0a6feaa57a

  • SHA512

    cca520b0b015f9b09e4cdb9f68e2a61dcf732ac6b24829993fdaa8e27474f4e2560af563c4e91e030ec673794012a7929b98ce21d45ef8f22766d2eb7286ee28

  • SSDEEP

    768:sh8GuoRdGwpYnsAL13FVm9zT0E4AaNyvQ4T/DDKcj68oXD5D39cnza0mfs/WHNM0:Qfz6nsAFFDlIJT/nVuDhtcz21HNM6p

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      e61b900edf71faae6651386821c9c38d_JaffaCakes118

    • Size

      57KB

    • MD5

      e61b900edf71faae6651386821c9c38d

    • SHA1

      0c426a33674cb2f11d9e77ccdf5461800004eec5

    • SHA256

      440a6fe3dce364d067328d92e8437f3ac798ad3b1b00f4d28f685b0a6feaa57a

    • SHA512

      cca520b0b015f9b09e4cdb9f68e2a61dcf732ac6b24829993fdaa8e27474f4e2560af563c4e91e030ec673794012a7929b98ce21d45ef8f22766d2eb7286ee28

    • SSDEEP

      768:sh8GuoRdGwpYnsAL13FVm9zT0E4AaNyvQ4T/DDKcj68oXD5D39cnza0mfs/WHNM0:Qfz6nsAFFDlIJT/nVuDhtcz21HNM6p

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks