General

  • Target

    8be7560045f5044b7a3e3a1a8c5c7a4f_JaffaCakes118

  • Size

    317KB

  • Sample

    241103-rmn3mswhqj

  • MD5

    8be7560045f5044b7a3e3a1a8c5c7a4f

  • SHA1

    529e2e80dd626cad236fc4063101668317f16436

  • SHA256

    1acaf777052e46bd11abf38406fb6cb4a3e0de6ec23dfbea029564c606a2fdcb

  • SHA512

    c2c143a198791dcafe1f794c0d3975b6590974cb17e27427a15be6398550f7636a94179cf46e1b767c0cd75f2999fb6a20683c06d241c9248db10b77b9d04071

  • SSDEEP

    6144:jsXvCmQRCtq1kePbvRqoHwBFdwmk/zzxhNvEeh7+PvgGj27F6/L1F/FOeR+bFB:6CmQRCtq1kePbvZwBFdwmkbzxhNv/+PS

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      8be7560045f5044b7a3e3a1a8c5c7a4f_JaffaCakes118

    • Size

      317KB

    • MD5

      8be7560045f5044b7a3e3a1a8c5c7a4f

    • SHA1

      529e2e80dd626cad236fc4063101668317f16436

    • SHA256

      1acaf777052e46bd11abf38406fb6cb4a3e0de6ec23dfbea029564c606a2fdcb

    • SHA512

      c2c143a198791dcafe1f794c0d3975b6590974cb17e27427a15be6398550f7636a94179cf46e1b767c0cd75f2999fb6a20683c06d241c9248db10b77b9d04071

    • SSDEEP

      6144:jsXvCmQRCtq1kePbvRqoHwBFdwmk/zzxhNvEeh7+PvgGj27F6/L1F/FOeR+bFB:6CmQRCtq1kePbvZwBFdwmkbzxhNv/+PS

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks