General

  • Target

    99c8763246f0b9a1e3128d4a88e7cc1f_JaffaCakes118

  • Size

    50KB

  • Sample

    241125-haffaszjbn

  • MD5

    99c8763246f0b9a1e3128d4a88e7cc1f

  • SHA1

    8449dcb832c5e329bb01a23ca012c100d37e0e69

  • SHA256

    4d1d75e4651ddd0b210e1257d43f5171db458447eda5fd62c46016dabde559b0

  • SHA512

    ecfdcd83572130bb751d8b98ea3dd1ff59a559cd5e213e58dc4e544b048045641d9a9bd4c1cb07a6fde10ba35c432624445e77c6be2e2fdce01ef28068429b95

  • SSDEEP

    768:VxHQF1YCzsFmvrPaNqVPJKW3cEoxgtLPILaNilcpXcKpUu5ovyavoc:3w5bzJPYm1P8a82phpUYiya

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      99c8763246f0b9a1e3128d4a88e7cc1f_JaffaCakes118

    • Size

      50KB

    • MD5

      99c8763246f0b9a1e3128d4a88e7cc1f

    • SHA1

      8449dcb832c5e329bb01a23ca012c100d37e0e69

    • SHA256

      4d1d75e4651ddd0b210e1257d43f5171db458447eda5fd62c46016dabde559b0

    • SHA512

      ecfdcd83572130bb751d8b98ea3dd1ff59a559cd5e213e58dc4e544b048045641d9a9bd4c1cb07a6fde10ba35c432624445e77c6be2e2fdce01ef28068429b95

    • SSDEEP

      768:VxHQF1YCzsFmvrPaNqVPJKW3cEoxgtLPILaNilcpXcKpUu5ovyavoc:3w5bzJPYm1P8a82phpUYiya

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks