General
-
Target
a3d4721af23e576373b7dcf4868ff310_JaffaCakes118
-
Size
93KB
-
Sample
241126-ynv1xatkfp
-
MD5
a3d4721af23e576373b7dcf4868ff310
-
SHA1
aca02c0c2b45a037968d4c42c4f51f654cd3ad7f
-
SHA256
e92e60a8605e161b5087d7c64bd3dbd8bacac9cf7f032c2e1939fa874c70e11e
-
SHA512
03fd76ec9513431fe79542bf97e6d7e17a822aea227c010ee1f26fc0333014e3a8fbf861a56dd48c9e2de165f10f4bc97b1e3f68fbb971ab5153371ff3150952
-
SSDEEP
1536:Pgs9QoWlIUV0D6dJSnVV39XN15ZC4F6NwqnfKVnPU3xm+zI4g8jmufY0t7W8nZf4:3WmCI6ijBilNZfJBm+zg8CufjtVnZf4
Static task
static1
Behavioral task
behavioral1
Sample
a3d4721af23e576373b7dcf4868ff310_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
a3d4721af23e576373b7dcf4868ff310_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
a3d4721af23e576373b7dcf4868ff310_JaffaCakes118
-
Size
93KB
-
MD5
a3d4721af23e576373b7dcf4868ff310
-
SHA1
aca02c0c2b45a037968d4c42c4f51f654cd3ad7f
-
SHA256
e92e60a8605e161b5087d7c64bd3dbd8bacac9cf7f032c2e1939fa874c70e11e
-
SHA512
03fd76ec9513431fe79542bf97e6d7e17a822aea227c010ee1f26fc0333014e3a8fbf861a56dd48c9e2de165f10f4bc97b1e3f68fbb971ab5153371ff3150952
-
SSDEEP
1536:Pgs9QoWlIUV0D6dJSnVV39XN15ZC4F6NwqnfKVnPU3xm+zI4g8jmufY0t7W8nZf4:3WmCI6ijBilNZfJBm+zg8CufjtVnZf4
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-