General

  • Target

    dc92ff4f166d38b6abeac80b5cc9af9c_JaffaCakes118

  • Size

    246KB

  • Sample

    241210-cs8lxavqal

  • MD5

    dc92ff4f166d38b6abeac80b5cc9af9c

  • SHA1

    5afa2679d052c95f216f23815d683e3eb54abb09

  • SHA256

    e1d20275cba70c2ea30ac11d76c96197ac5bcf192c85b9986ca3b496eb79caf5

  • SHA512

    cace0022a05005531378d5f26ff1003fa543a301e63f053fcd756ab59dbf77798b0d149d2292b0f240b5a693ca94fabdb421f2a5fdb0c57383bd79887eab60bc

  • SSDEEP

    6144:shvcSsx+K+v1AwmkRXcaSacztIvPAAivpmU0b6:sBZs0KYAwXcWscobvpx0

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      dc92ff4f166d38b6abeac80b5cc9af9c_JaffaCakes118

    • Size

      246KB

    • MD5

      dc92ff4f166d38b6abeac80b5cc9af9c

    • SHA1

      5afa2679d052c95f216f23815d683e3eb54abb09

    • SHA256

      e1d20275cba70c2ea30ac11d76c96197ac5bcf192c85b9986ca3b496eb79caf5

    • SHA512

      cace0022a05005531378d5f26ff1003fa543a301e63f053fcd756ab59dbf77798b0d149d2292b0f240b5a693ca94fabdb421f2a5fdb0c57383bd79887eab60bc

    • SSDEEP

      6144:shvcSsx+K+v1AwmkRXcaSacztIvPAAivpmU0b6:sBZs0KYAwXcWscobvpx0

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks