General

  • Target

    8ee7602179767176eb0203f6934d6d9d_JaffaCakes118

  • Size

    502KB

  • Sample

    241104-dxnyqssdrc

  • MD5

    8ee7602179767176eb0203f6934d6d9d

  • SHA1

    1b4249f3e6ee4b1e9f520827e367b041fd10cbf9

  • SHA256

    1d24d76ba19757075b016b3f01ec8c4c2388de06f71ce4231d2bec387047e5ec

  • SHA512

    f32f57949e8ba6d9bb37f576f578c50625bb894492380e396e986643b2a36c8fe0773783536ad9f72e78f8c1ad3696e11673d31ba401513d2aa636a46782acc3

  • SSDEEP

    12288:lh3rHBngg2d/YAaGYw93rbDgNqEq4ecUeMM:JngpYAaGYwprbDspNec/MM

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      8ee7602179767176eb0203f6934d6d9d_JaffaCakes118

    • Size

      502KB

    • MD5

      8ee7602179767176eb0203f6934d6d9d

    • SHA1

      1b4249f3e6ee4b1e9f520827e367b041fd10cbf9

    • SHA256

      1d24d76ba19757075b016b3f01ec8c4c2388de06f71ce4231d2bec387047e5ec

    • SHA512

      f32f57949e8ba6d9bb37f576f578c50625bb894492380e396e986643b2a36c8fe0773783536ad9f72e78f8c1ad3696e11673d31ba401513d2aa636a46782acc3

    • SSDEEP

      12288:lh3rHBngg2d/YAaGYw93rbDgNqEq4ecUeMM:JngpYAaGYwprbDspNec/MM

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks