General

  • Target

    a08c36ce4fc63d3d737b76fe24a65c0e_JaffaCakes118

  • Size

    93KB

  • Sample

    241126-h4ze9sxlem

  • MD5

    a08c36ce4fc63d3d737b76fe24a65c0e

  • SHA1

    cf7c1d0235b7145e70b9f153fd831082d3b23ba0

  • SHA256

    f33980daf3faf7b042c76bbf4256e309399c3d78891c075e71af3ab6889eb0a5

  • SHA512

    8d2963f15f10b78a14ca28d5c7bcc2e2460e80ac724794ef04d297925978cc1a2ebc60ea5e989ffdec9c4d4bf26e12ab13f2e12014399a0c4dc0445919b57842

  • SSDEEP

    1536:V/snZ4NJ8QAUIqvcUYNaxNIe9AR63oYklGi5rc7LtCzJqK/U4tg2vYdo0917:V0nuNJUqNYuIrSelrVStCzJzTe2vYdo+

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      a08c36ce4fc63d3d737b76fe24a65c0e_JaffaCakes118

    • Size

      93KB

    • MD5

      a08c36ce4fc63d3d737b76fe24a65c0e

    • SHA1

      cf7c1d0235b7145e70b9f153fd831082d3b23ba0

    • SHA256

      f33980daf3faf7b042c76bbf4256e309399c3d78891c075e71af3ab6889eb0a5

    • SHA512

      8d2963f15f10b78a14ca28d5c7bcc2e2460e80ac724794ef04d297925978cc1a2ebc60ea5e989ffdec9c4d4bf26e12ab13f2e12014399a0c4dc0445919b57842

    • SSDEEP

      1536:V/snZ4NJ8QAUIqvcUYNaxNIe9AR63oYklGi5rc7LtCzJqK/U4tg2vYdo0917:V0nuNJUqNYuIrSelrVStCzJzTe2vYdo+

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks