General

  • Target

    ba556188f58ee2943c66101911f49e92_JaffaCakes118

  • Size

    72KB

  • Sample

    241202-1pdjcszqhk

  • MD5

    ba556188f58ee2943c66101911f49e92

  • SHA1

    e9ab1ac94606d68af30073ec608f088de63602d2

  • SHA256

    b889e91ff773e07460c35344974f61bd54f895552fd27cf10d8a98018f3f1b3c

  • SHA512

    9e91f6d3ac200fe6f308730268ffce7c0dba9dc567fa402966b6912e5899f3cf8d0ad5c167b968a1cea5fe16728b03f3e86abb9ff6f27ebcdbb2f5b74eb6edc1

  • SSDEEP

    1536:IgAM9tEWZo08THIkCKVEsA0RYTv72ydpNMb+KR0Nc8QsJq39:yR08ckC0iTvLNe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      ba556188f58ee2943c66101911f49e92_JaffaCakes118

    • Size

      72KB

    • MD5

      ba556188f58ee2943c66101911f49e92

    • SHA1

      e9ab1ac94606d68af30073ec608f088de63602d2

    • SHA256

      b889e91ff773e07460c35344974f61bd54f895552fd27cf10d8a98018f3f1b3c

    • SHA512

      9e91f6d3ac200fe6f308730268ffce7c0dba9dc567fa402966b6912e5899f3cf8d0ad5c167b968a1cea5fe16728b03f3e86abb9ff6f27ebcdbb2f5b74eb6edc1

    • SSDEEP

      1536:IgAM9tEWZo08THIkCKVEsA0RYTv72ydpNMb+KR0Nc8QsJq39:yR08ckC0iTvLNe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks