General

  • Target

    bccdb0e11fec3ba7571c064b61f42ee8_JaffaCakes118

  • Size

    42KB

  • Sample

    241203-lp3qxszldv

  • MD5

    bccdb0e11fec3ba7571c064b61f42ee8

  • SHA1

    e7eeb7661970bb1638c56de65db54c5b34315cde

  • SHA256

    68f058068d38f11bd310b141dd5f5f3d503ecb2032980a008b3448cb49e98aa0

  • SHA512

    bd23d418de83ba1d96453ad309271cc3fd1561422fc854189a010f290629773a320188416cd71856ca4146dd2c76ae5ac809156ba47224d6ec27ef17b6ecb751

  • SSDEEP

    768:UuCkdC2D5z4oWV0OCAB4Rld8Inv47r6u5W7TKE:Ujkdjl8WK4RP84vkmu5WvK

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      bccdb0e11fec3ba7571c064b61f42ee8_JaffaCakes118

    • Size

      42KB

    • MD5

      bccdb0e11fec3ba7571c064b61f42ee8

    • SHA1

      e7eeb7661970bb1638c56de65db54c5b34315cde

    • SHA256

      68f058068d38f11bd310b141dd5f5f3d503ecb2032980a008b3448cb49e98aa0

    • SHA512

      bd23d418de83ba1d96453ad309271cc3fd1561422fc854189a010f290629773a320188416cd71856ca4146dd2c76ae5ac809156ba47224d6ec27ef17b6ecb751

    • SSDEEP

      768:UuCkdC2D5z4oWV0OCAB4Rld8Inv47r6u5W7TKE:Ujkdjl8WK4RP84vkmu5WvK

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks