General

  • Target

    a4c7e7d52b6fea63e28694bfc9bc713b_JaffaCakes118

  • Size

    37KB

  • Sample

    241126-3t2svssnar

  • MD5

    a4c7e7d52b6fea63e28694bfc9bc713b

  • SHA1

    b625e0562a67c1ca42fff468c00258b95b52f906

  • SHA256

    6cfd3f1605342f97ec7f22db1141357e8aac01d9a9c34d816ea4b9b421c83fdf

  • SHA512

    dbda167af200e6ca524c27203d3c4c4cdb5b825bc31489d11e19c13f2b5a513e25786c15ac42579a2dbd560aab12a1e14a8afd6bdc437eb171b5760801c157d2

  • SSDEEP

    768:Tux6dqTxsxkHK946xndZcI29k9H1BZhOxyJEtiFv4M6lRZ95x:TuTsxKun12e9HZA8a5h5x

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      a4c7e7d52b6fea63e28694bfc9bc713b_JaffaCakes118

    • Size

      37KB

    • MD5

      a4c7e7d52b6fea63e28694bfc9bc713b

    • SHA1

      b625e0562a67c1ca42fff468c00258b95b52f906

    • SHA256

      6cfd3f1605342f97ec7f22db1141357e8aac01d9a9c34d816ea4b9b421c83fdf

    • SHA512

      dbda167af200e6ca524c27203d3c4c4cdb5b825bc31489d11e19c13f2b5a513e25786c15ac42579a2dbd560aab12a1e14a8afd6bdc437eb171b5760801c157d2

    • SSDEEP

      768:Tux6dqTxsxkHK946xndZcI29k9H1BZhOxyJEtiFv4M6lRZ95x:TuTsxKun12e9HZA8a5h5x

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks