General
-
Target
b4410ebd1a7f254bc88f4d6a16047c30_JaffaCakes118
-
Size
116KB
-
Sample
241130-a5f2bayraj
-
MD5
b4410ebd1a7f254bc88f4d6a16047c30
-
SHA1
3ee004a087607a0b582870b431093ebc344725b1
-
SHA256
db184bed6c94d4ec5ba45c3c3071a1a8882a7cd68210619cf8b829dfe409e7ee
-
SHA512
d8354593a4a47a177906113427432edd9606dd095d44afec82a8fdd4e3178a5ec135dfc259d6041054d36b37c42446fdf49f8110776051154da507078f494b5f
-
SSDEEP
3072:EZpqQJAO4yQ+Wt7iPNPvAKOhk9JzetrRqXyOnkIY+I5E:QpqQGcWlilDqtFqXNnkRx5
Static task
static1
Behavioral task
behavioral1
Sample
b4410ebd1a7f254bc88f4d6a16047c30_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b4410ebd1a7f254bc88f4d6a16047c30_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
b4410ebd1a7f254bc88f4d6a16047c30_JaffaCakes118
-
Size
116KB
-
MD5
b4410ebd1a7f254bc88f4d6a16047c30
-
SHA1
3ee004a087607a0b582870b431093ebc344725b1
-
SHA256
db184bed6c94d4ec5ba45c3c3071a1a8882a7cd68210619cf8b829dfe409e7ee
-
SHA512
d8354593a4a47a177906113427432edd9606dd095d44afec82a8fdd4e3178a5ec135dfc259d6041054d36b37c42446fdf49f8110776051154da507078f494b5f
-
SSDEEP
3072:EZpqQJAO4yQ+Wt7iPNPvAKOhk9JzetrRqXyOnkIY+I5E:QpqQGcWlilDqtFqXNnkRx5
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-