General

  • Target

    eefbc84fa9ab0ef4e06d251b9829ec56_JaffaCakes118

  • Size

    3KB

  • Sample

    240921-dzxzesshnk

  • MD5

    eefbc84fa9ab0ef4e06d251b9829ec56

  • SHA1

    7e685087aa8b45aebb5ca9a86ba9d4c0bdbbdc92

  • SHA256

    1e154faaf2f81734e88baebeb9eae2136853d843f5a91f64504496676d7456d0

  • SHA512

    9d1d613d0d6a616036b61a33e999a470106b8f1ad93c374dd417dc9bc22e649ba42db37ba8b1188d9016cc479aec75f0d1bb0de94e70ea16cf30f206db50f6d3

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://958EDC3E1EF17895.dyndns.org:443/INITM

Targets

    • Target

      eefbc84fa9ab0ef4e06d251b9829ec56_JaffaCakes118

    • Size

      3KB

    • MD5

      eefbc84fa9ab0ef4e06d251b9829ec56

    • SHA1

      7e685087aa8b45aebb5ca9a86ba9d4c0bdbbdc92

    • SHA256

      1e154faaf2f81734e88baebeb9eae2136853d843f5a91f64504496676d7456d0

    • SHA512

      9d1d613d0d6a616036b61a33e999a470106b8f1ad93c374dd417dc9bc22e649ba42db37ba8b1188d9016cc479aec75f0d1bb0de94e70ea16cf30f206db50f6d3

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks