General

  • Target

    8f38a1d27ead6972c32720e2cbaaa5c2_JaffaCakes118

  • Size

    6KB

  • Sample

    241104-fc6ddstfqf

  • MD5

    8f38a1d27ead6972c32720e2cbaaa5c2

  • SHA1

    9bd5a2fb07519b1eb64081b8f4f95a19aace79e8

  • SHA256

    08030310d875f0b0be166a5384da2fb6a0428420d3bcb1daa95312ecf9807070

  • SHA512

    97c419f3b8ef7316cd3e33dee1362c443faf1ebeafa3a431ab7ff39ea42c262285c6e5fa1e6f7c372398f5d2b93016bf60d47f96ef3b1cdef29ee555fd86d408

  • SSDEEP

    96:zoRts76wxjcbfx2PQtxMY6fChGgdiGyPr+Ma83:URK76+jckPux8AGb6Maa

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      8f38a1d27ead6972c32720e2cbaaa5c2_JaffaCakes118

    • Size

      6KB

    • MD5

      8f38a1d27ead6972c32720e2cbaaa5c2

    • SHA1

      9bd5a2fb07519b1eb64081b8f4f95a19aace79e8

    • SHA256

      08030310d875f0b0be166a5384da2fb6a0428420d3bcb1daa95312ecf9807070

    • SHA512

      97c419f3b8ef7316cd3e33dee1362c443faf1ebeafa3a431ab7ff39ea42c262285c6e5fa1e6f7c372398f5d2b93016bf60d47f96ef3b1cdef29ee555fd86d408

    • SSDEEP

      96:zoRts76wxjcbfx2PQtxMY6fChGgdiGyPr+Ma83:URK76+jckPux8AGb6Maa

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks