General
-
Target
a1d134b756dbfa6daec8694b0e88dd32_JaffaCakes118
-
Size
220KB
-
Sample
241126-n8vkrswraj
-
MD5
a1d134b756dbfa6daec8694b0e88dd32
-
SHA1
7233543c841fb0ae3da20888f5502b24cbf85ece
-
SHA256
05a485884308d8395f1605a3fa21e6167a1d8b17b5e5776860f37f3b84784a41
-
SHA512
95c0cb401a155a97b3ab38b466bbb0ebb6e67672d58b5553db02fddaa388b20292b660ecafac12ab30be8b4418a2278fc91ea10ef15526a3b5fbad3b5296a5df
-
SSDEEP
6144:DnPo/W4nDWgRAkPYxce/a9zH2QmOY6xWa:DnPoTR3PYxax26xWa
Static task
static1
Behavioral task
behavioral1
Sample
a1d134b756dbfa6daec8694b0e88dd32_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
a1d134b756dbfa6daec8694b0e88dd32_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
a1d134b756dbfa6daec8694b0e88dd32_JaffaCakes118
-
Size
220KB
-
MD5
a1d134b756dbfa6daec8694b0e88dd32
-
SHA1
7233543c841fb0ae3da20888f5502b24cbf85ece
-
SHA256
05a485884308d8395f1605a3fa21e6167a1d8b17b5e5776860f37f3b84784a41
-
SHA512
95c0cb401a155a97b3ab38b466bbb0ebb6e67672d58b5553db02fddaa388b20292b660ecafac12ab30be8b4418a2278fc91ea10ef15526a3b5fbad3b5296a5df
-
SSDEEP
6144:DnPo/W4nDWgRAkPYxce/a9zH2QmOY6xWa:DnPoTR3PYxax26xWa
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Blocklisted process makes network request
-