General

  • Target

    be9fc317bd5d693b22fffa63e374d831_JaffaCakes118

  • Size

    233KB

  • Sample

    241203-wxj9naxlez

  • MD5

    be9fc317bd5d693b22fffa63e374d831

  • SHA1

    cd37cb9459e0bd6d069e705eec0be367711e1bc3

  • SHA256

    e241d8d43cc45bc69a16603258c5e27f85fff2ba2b16780fa5d8bda630206ba7

  • SHA512

    d6f1853c189ed6195e24f0e104e63a3602ce7198f9f98d24cdfce804e164cd16c85723a3f00ca75935f0be43452816d18e2245164b4532a52f0da3e5aadfe897

  • SSDEEP

    6144:OFhYao1J5nPpzuxV0yZLO5LAO4IhDEji5AJxo5VcYXMeYtbm:uHcpij/ZLOtAO4aDWiqJMSY8eYtbm

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://70.61.102.166:443/ARf95

Targets

    • Target

      be9fc317bd5d693b22fffa63e374d831_JaffaCakes118

    • Size

      233KB

    • MD5

      be9fc317bd5d693b22fffa63e374d831

    • SHA1

      cd37cb9459e0bd6d069e705eec0be367711e1bc3

    • SHA256

      e241d8d43cc45bc69a16603258c5e27f85fff2ba2b16780fa5d8bda630206ba7

    • SHA512

      d6f1853c189ed6195e24f0e104e63a3602ce7198f9f98d24cdfce804e164cd16c85723a3f00ca75935f0be43452816d18e2245164b4532a52f0da3e5aadfe897

    • SSDEEP

      6144:OFhYao1J5nPpzuxV0yZLO5LAO4IhDEji5AJxo5VcYXMeYtbm:uHcpij/ZLOtAO4aDWiqJMSY8eYtbm

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks