General
-
Target
a9b26d76d855c2427813d22600ba797a_JaffaCakes118
-
Size
244KB
-
Sample
241127-z8tt1s1may
-
MD5
a9b26d76d855c2427813d22600ba797a
-
SHA1
8f5e4c29157bbe9691bf625ed5ea72a34cf86eec
-
SHA256
1eda80aaef0a7d3cdc41e4ad93dba17a5731ca77d9be6efb297634b135d6705f
-
SHA512
b98d10ead941c78dd30cc70d2f63133089d5619f0e529e33163b619fcaa6fde09a310c65d2ed6e68be3315e436501c2ac0d809690494266a39eecc3baa17e1da
-
SSDEEP
6144:Y2MeMBlZXpUHLO7OGCdU8Iz3zPobd8EEEEEEEEEEEEEEEEEEEO:Y8MBlgrO7OGseiu
Static task
static1
Behavioral task
behavioral1
Sample
a9b26d76d855c2427813d22600ba797a_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
a9b26d76d855c2427813d22600ba797a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
a9b26d76d855c2427813d22600ba797a_JaffaCakes118
-
Size
244KB
-
MD5
a9b26d76d855c2427813d22600ba797a
-
SHA1
8f5e4c29157bbe9691bf625ed5ea72a34cf86eec
-
SHA256
1eda80aaef0a7d3cdc41e4ad93dba17a5731ca77d9be6efb297634b135d6705f
-
SHA512
b98d10ead941c78dd30cc70d2f63133089d5619f0e529e33163b619fcaa6fde09a310c65d2ed6e68be3315e436501c2ac0d809690494266a39eecc3baa17e1da
-
SSDEEP
6144:Y2MeMBlZXpUHLO7OGCdU8Iz3zPobd8EEEEEEEEEEEEEEEEEEEO:Y8MBlgrO7OGseiu
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-