General

  • Target

    e04751af9ef220f06a152bd89891e8d3_JaffaCakes118

  • Size

    55KB

  • Sample

    241211-hemeea1ndt

  • MD5

    e04751af9ef220f06a152bd89891e8d3

  • SHA1

    1a6a4e22248395f48438ad1e8658d97aa4027bc4

  • SHA256

    e2836ba4279988135fb48b4cda62e6a2aad9bd8c647d1e0c89e3e5b0d154985b

  • SHA512

    f949894460d2ffa3a3ae5887f58fd9da0cd499735be1137af3382905a01c452034439bbaaf5d4d65882de91e58f3faf2d57f2af97107358d852ff8e48adb1cdf

  • SSDEEP

    1536:lXWQr3ONFt5Bbbwv7qGCBOyVPIBfsbpPRzlen:lmQub/u/E9NdbpPRz

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      e04751af9ef220f06a152bd89891e8d3_JaffaCakes118

    • Size

      55KB

    • MD5

      e04751af9ef220f06a152bd89891e8d3

    • SHA1

      1a6a4e22248395f48438ad1e8658d97aa4027bc4

    • SHA256

      e2836ba4279988135fb48b4cda62e6a2aad9bd8c647d1e0c89e3e5b0d154985b

    • SHA512

      f949894460d2ffa3a3ae5887f58fd9da0cd499735be1137af3382905a01c452034439bbaaf5d4d65882de91e58f3faf2d57f2af97107358d852ff8e48adb1cdf

    • SSDEEP

      1536:lXWQr3ONFt5Bbbwv7qGCBOyVPIBfsbpPRzlen:lmQub/u/E9NdbpPRz

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks