General
-
Target
13182bfd67a37ea85044c821922c1542_JaffaCakes118
-
Size
155KB
-
Sample
241004-m8bbfszhlm
-
MD5
13182bfd67a37ea85044c821922c1542
-
SHA1
bf023a787662a7af944536120b0525a8c19d3159
-
SHA256
aeb0b37b02fd1d03f97b55069b9fa4eff5da902fbc4369053cf2046b5aa38da0
-
SHA512
7871d17e4e1783776f003f25d37bca3e70129131528a5b9b09a2525acf10648d68eb56d3b90087db891d816f697def84909f5a395f92e61520bd3709168de2e7
-
SSDEEP
3072:NMhNo5TeXlicUkykgnfyktNe6BhraivprqU07dFUZjNWFiJ:NaqT2lnVgfjXAivpmU0x+Z0M
Static task
static1
Behavioral task
behavioral1
Sample
13182bfd67a37ea85044c821922c1542_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13182bfd67a37ea85044c821922c1542_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
13182bfd67a37ea85044c821922c1542_JaffaCakes118
-
Size
155KB
-
MD5
13182bfd67a37ea85044c821922c1542
-
SHA1
bf023a787662a7af944536120b0525a8c19d3159
-
SHA256
aeb0b37b02fd1d03f97b55069b9fa4eff5da902fbc4369053cf2046b5aa38da0
-
SHA512
7871d17e4e1783776f003f25d37bca3e70129131528a5b9b09a2525acf10648d68eb56d3b90087db891d816f697def84909f5a395f92e61520bd3709168de2e7
-
SSDEEP
3072:NMhNo5TeXlicUkykgnfyktNe6BhraivprqU07dFUZjNWFiJ:NaqT2lnVgfjXAivpmU0x+Z0M
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-