General
-
Target
9f0f0a2e051874268218e0881003b08c_JaffaCakes118
-
Size
291KB
-
Sample
241126-bxa1rstmbm
-
MD5
9f0f0a2e051874268218e0881003b08c
-
SHA1
7158dfad0899020de0ad92cd488d69128830693f
-
SHA256
e4b1739eef6c8aa74aefcd241e2a1d38ca68dbeb8daef8d706594206d4dbc45f
-
SHA512
76b1ebea23bba45df1208a0069be0e9c14026188ebc16f23ade43152c908ff38a0e9eda32b781232e73c2a9de3e277d00301b18486ee3ecd632a9a7d8940ccaf
-
SSDEEP
3072:m2ulHM8xeHFGBlZXQ8AxHCe8qKViO7OaZpOBF7mB5Kvwz3z+radXg2yBrojcCyTG:m2MeMBlZXpUHLO7OGCdU8Iz3z5obd8
Static task
static1
Behavioral task
behavioral1
Sample
9f0f0a2e051874268218e0881003b08c_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
9f0f0a2e051874268218e0881003b08c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
9f0f0a2e051874268218e0881003b08c_JaffaCakes118
-
Size
291KB
-
MD5
9f0f0a2e051874268218e0881003b08c
-
SHA1
7158dfad0899020de0ad92cd488d69128830693f
-
SHA256
e4b1739eef6c8aa74aefcd241e2a1d38ca68dbeb8daef8d706594206d4dbc45f
-
SHA512
76b1ebea23bba45df1208a0069be0e9c14026188ebc16f23ade43152c908ff38a0e9eda32b781232e73c2a9de3e277d00301b18486ee3ecd632a9a7d8940ccaf
-
SSDEEP
3072:m2ulHM8xeHFGBlZXQ8AxHCe8qKViO7OaZpOBF7mB5Kvwz3z+radXg2yBrojcCyTG:m2MeMBlZXpUHLO7OGCdU8Iz3z5obd8
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-