General
-
Target
ecb3fb6cabac7484f84184105ab4ad03_JaffaCakes118
-
Size
852KB
-
Sample
240920-ddvbeawalm
-
MD5
ecb3fb6cabac7484f84184105ab4ad03
-
SHA1
4e01872b5afdc16d1b18e1f650cbefa67d9ffbc5
-
SHA256
b0e184242cd2daafaf9f756b2140b0ea432ea733d66fdb03f1a0018ed28170e1
-
SHA512
4c46d96745e1a0e23ec3b6b8edc1c1808e5a8ca91de7e636d91bf11849dd74c862aad6e9dba1de031e3b4087cb007782accf781c6672d81bc3b5f8f232914d7b
-
SSDEEP
12288:HE+NLeE1PYEPZ0Vy3F4fjElBjIq2KKn/Hz6I:k+xPZ0VQoglFIlNV
Behavioral task
behavioral1
Sample
ecb3fb6cabac7484f84184105ab4ad03_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ecb3fb6cabac7484f84184105ab4ad03_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
ecb3fb6cabac7484f84184105ab4ad03_JaffaCakes118
-
Size
852KB
-
MD5
ecb3fb6cabac7484f84184105ab4ad03
-
SHA1
4e01872b5afdc16d1b18e1f650cbefa67d9ffbc5
-
SHA256
b0e184242cd2daafaf9f756b2140b0ea432ea733d66fdb03f1a0018ed28170e1
-
SHA512
4c46d96745e1a0e23ec3b6b8edc1c1808e5a8ca91de7e636d91bf11849dd74c862aad6e9dba1de031e3b4087cb007782accf781c6672d81bc3b5f8f232914d7b
-
SSDEEP
12288:HE+NLeE1PYEPZ0Vy3F4fjElBjIq2KKn/Hz6I:k+xPZ0VQoglFIlNV
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-