General

  • Target

    8ff2493e38fb26b5ade18347e659234a_JaffaCakes118

  • Size

    401KB

  • Sample

    241123-wyh3zswlhl

  • MD5

    8ff2493e38fb26b5ade18347e659234a

  • SHA1

    c71ab76574c6dec55d7133559e11bcad752437c7

  • SHA256

    f381e1f8f462a5b2de8e6384867e3546e50b8b7830d25f4f34b3154c61859062

  • SHA512

    8894137422980454212e3548db60981931fa69207513073f8a4a13f2262068024e478a514dd6b849f2edfcdb21d04380abe6fcb897e8904b0c828fc106bc8752

  • SSDEEP

    6144:8L5UO7uyUmmR3ZiQp2Fu4CU2RWGsIWA9+WsQj30zM/m61R7U:8L5P7uyVmPGu4CU2RUIP9+xQj3jm

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      8ff2493e38fb26b5ade18347e659234a_JaffaCakes118

    • Size

      401KB

    • MD5

      8ff2493e38fb26b5ade18347e659234a

    • SHA1

      c71ab76574c6dec55d7133559e11bcad752437c7

    • SHA256

      f381e1f8f462a5b2de8e6384867e3546e50b8b7830d25f4f34b3154c61859062

    • SHA512

      8894137422980454212e3548db60981931fa69207513073f8a4a13f2262068024e478a514dd6b849f2edfcdb21d04380abe6fcb897e8904b0c828fc106bc8752

    • SSDEEP

      6144:8L5UO7uyUmmR3ZiQp2Fu4CU2RWGsIWA9+WsQj30zM/m61R7U:8L5P7uyVmPGu4CU2RUIP9+xQj3jm

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks