General

  • Target

    ce46eb95fece1606dc284b8c04b493d2_JaffaCakes118

  • Size

    274KB

  • Sample

    241206-wfz9jsvqan

  • MD5

    ce46eb95fece1606dc284b8c04b493d2

  • SHA1

    ddf05e9185be47fa1cf11cf3d296ec66f81f6477

  • SHA256

    5db97f76d33bf29c3ddabd323840e6456afd92014059b39e809575a4b6d2f290

  • SHA512

    751ea1f43bab69d63151b076f4c689018743a8c5a3adcc162429718c1891de64e1c4953440eab7b5c55242f0dd2dbba0d4e4f91ae84be6e807af679e004daa16

  • SSDEEP

    6144:oW95WO18EFJpK/rBjccRiyhQEl3oCXLfRTR19K4L76JDNbewMAAGy9:oAzFvc79oCbv6DJDNa+u

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      ce46eb95fece1606dc284b8c04b493d2_JaffaCakes118

    • Size

      274KB

    • MD5

      ce46eb95fece1606dc284b8c04b493d2

    • SHA1

      ddf05e9185be47fa1cf11cf3d296ec66f81f6477

    • SHA256

      5db97f76d33bf29c3ddabd323840e6456afd92014059b39e809575a4b6d2f290

    • SHA512

      751ea1f43bab69d63151b076f4c689018743a8c5a3adcc162429718c1891de64e1c4953440eab7b5c55242f0dd2dbba0d4e4f91ae84be6e807af679e004daa16

    • SSDEEP

      6144:oW95WO18EFJpK/rBjccRiyhQEl3oCXLfRTR19K4L76JDNbewMAAGy9:oAzFvc79oCbv6DJDNa+u

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks