General

  • Target

    cb81b52f6edde0ba925ca3c81c34f750_JaffaCakes118

  • Size

    240KB

  • Sample

    241206-g7ygpszpfn

  • MD5

    cb81b52f6edde0ba925ca3c81c34f750

  • SHA1

    0c531587f119db8eb9677593230e78dd4cce4059

  • SHA256

    0ed2886eafa96354821a4cbe7b0a934f0fcb21ec13eefb30cb96e93aa8123685

  • SHA512

    03fa72655090118c64db416b87afbfa26e6de5ff20c4528c86c9c65a688958445d0a49987da03fade9acb804f5c9426b7edc8410e3ea603c15ab8a6871437252

  • SSDEEP

    6144:Y2MeMBlZXpUHLO7OGCdU8Iz3zPobd8EEEEEEEEEEEEEEEO:Y8MBlgrO7OGseim

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      cb81b52f6edde0ba925ca3c81c34f750_JaffaCakes118

    • Size

      240KB

    • MD5

      cb81b52f6edde0ba925ca3c81c34f750

    • SHA1

      0c531587f119db8eb9677593230e78dd4cce4059

    • SHA256

      0ed2886eafa96354821a4cbe7b0a934f0fcb21ec13eefb30cb96e93aa8123685

    • SHA512

      03fa72655090118c64db416b87afbfa26e6de5ff20c4528c86c9c65a688958445d0a49987da03fade9acb804f5c9426b7edc8410e3ea603c15ab8a6871437252

    • SSDEEP

      6144:Y2MeMBlZXpUHLO7OGCdU8Iz3zPobd8EEEEEEEEEEEEEEEO:Y8MBlgrO7OGseim

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks