General
-
Target
8ff2493e38fb26b5ade18347e659234a_JaffaCakes118
-
Size
401KB
-
Sample
241123-wyh3zswlhl
-
MD5
8ff2493e38fb26b5ade18347e659234a
-
SHA1
c71ab76574c6dec55d7133559e11bcad752437c7
-
SHA256
f381e1f8f462a5b2de8e6384867e3546e50b8b7830d25f4f34b3154c61859062
-
SHA512
8894137422980454212e3548db60981931fa69207513073f8a4a13f2262068024e478a514dd6b849f2edfcdb21d04380abe6fcb897e8904b0c828fc106bc8752
-
SSDEEP
6144:8L5UO7uyUmmR3ZiQp2Fu4CU2RWGsIWA9+WsQj30zM/m61R7U:8L5P7uyVmPGu4CU2RUIP9+xQj3jm
Behavioral task
behavioral1
Sample
8ff2493e38fb26b5ade18347e659234a_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
8ff2493e38fb26b5ade18347e659234a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
8ff2493e38fb26b5ade18347e659234a_JaffaCakes118
-
Size
401KB
-
MD5
8ff2493e38fb26b5ade18347e659234a
-
SHA1
c71ab76574c6dec55d7133559e11bcad752437c7
-
SHA256
f381e1f8f462a5b2de8e6384867e3546e50b8b7830d25f4f34b3154c61859062
-
SHA512
8894137422980454212e3548db60981931fa69207513073f8a4a13f2262068024e478a514dd6b849f2edfcdb21d04380abe6fcb897e8904b0c828fc106bc8752
-
SSDEEP
6144:8L5UO7uyUmmR3ZiQp2Fu4CU2RWGsIWA9+WsQj30zM/m61R7U:8L5P7uyVmPGu4CU2RUIP9+xQj3jm
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-