General
-
Target
8be7560045f5044b7a3e3a1a8c5c7a4f_JaffaCakes118
-
Size
317KB
-
Sample
241103-rmn3mswhqj
-
MD5
8be7560045f5044b7a3e3a1a8c5c7a4f
-
SHA1
529e2e80dd626cad236fc4063101668317f16436
-
SHA256
1acaf777052e46bd11abf38406fb6cb4a3e0de6ec23dfbea029564c606a2fdcb
-
SHA512
c2c143a198791dcafe1f794c0d3975b6590974cb17e27427a15be6398550f7636a94179cf46e1b767c0cd75f2999fb6a20683c06d241c9248db10b77b9d04071
-
SSDEEP
6144:jsXvCmQRCtq1kePbvRqoHwBFdwmk/zzxhNvEeh7+PvgGj27F6/L1F/FOeR+bFB:6CmQRCtq1kePbvZwBFdwmkbzxhNv/+PS
Behavioral task
behavioral1
Sample
8be7560045f5044b7a3e3a1a8c5c7a4f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8be7560045f5044b7a3e3a1a8c5c7a4f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
8be7560045f5044b7a3e3a1a8c5c7a4f_JaffaCakes118
-
Size
317KB
-
MD5
8be7560045f5044b7a3e3a1a8c5c7a4f
-
SHA1
529e2e80dd626cad236fc4063101668317f16436
-
SHA256
1acaf777052e46bd11abf38406fb6cb4a3e0de6ec23dfbea029564c606a2fdcb
-
SHA512
c2c143a198791dcafe1f794c0d3975b6590974cb17e27427a15be6398550f7636a94179cf46e1b767c0cd75f2999fb6a20683c06d241c9248db10b77b9d04071
-
SSDEEP
6144:jsXvCmQRCtq1kePbvRqoHwBFdwmk/zzxhNvEeh7+PvgGj27F6/L1F/FOeR+bFB:6CmQRCtq1kePbvZwBFdwmkbzxhNv/+PS
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-