General

  • Target

    a3d4721af23e576373b7dcf4868ff310_JaffaCakes118

  • Size

    93KB

  • Sample

    241126-ynv1xatkfp

  • MD5

    a3d4721af23e576373b7dcf4868ff310

  • SHA1

    aca02c0c2b45a037968d4c42c4f51f654cd3ad7f

  • SHA256

    e92e60a8605e161b5087d7c64bd3dbd8bacac9cf7f032c2e1939fa874c70e11e

  • SHA512

    03fd76ec9513431fe79542bf97e6d7e17a822aea227c010ee1f26fc0333014e3a8fbf861a56dd48c9e2de165f10f4bc97b1e3f68fbb971ab5153371ff3150952

  • SSDEEP

    1536:Pgs9QoWlIUV0D6dJSnVV39XN15ZC4F6NwqnfKVnPU3xm+zI4g8jmufY0t7W8nZf4:3WmCI6ijBilNZfJBm+zg8CufjtVnZf4

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      a3d4721af23e576373b7dcf4868ff310_JaffaCakes118

    • Size

      93KB

    • MD5

      a3d4721af23e576373b7dcf4868ff310

    • SHA1

      aca02c0c2b45a037968d4c42c4f51f654cd3ad7f

    • SHA256

      e92e60a8605e161b5087d7c64bd3dbd8bacac9cf7f032c2e1939fa874c70e11e

    • SHA512

      03fd76ec9513431fe79542bf97e6d7e17a822aea227c010ee1f26fc0333014e3a8fbf861a56dd48c9e2de165f10f4bc97b1e3f68fbb971ab5153371ff3150952

    • SSDEEP

      1536:Pgs9QoWlIUV0D6dJSnVV39XN15ZC4F6NwqnfKVnPU3xm+zI4g8jmufY0t7W8nZf4:3WmCI6ijBilNZfJBm+zg8CufjtVnZf4

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks