General

  • Target

    e334a3b2d9187c1c1b95a1080a4819b6_JaffaCakes118

  • Size

    454KB

  • Sample

    241211-zt66ssykct

  • MD5

    e334a3b2d9187c1c1b95a1080a4819b6

  • SHA1

    27e9d384ee66a0d483d078bca77152ecd814ec52

  • SHA256

    dec5dace1bdfb490be6347de745ba489889ddceb44353106eec6f26a9b83d549

  • SHA512

    d47e337675f722c02f2d4423624d4c551e2d02b86edf134af4e64cf524fceb191430c5ae64cb3f0d068b58e893eca3221d1a2b18ed11aa462353fd04c90a3a71

  • SSDEEP

    12288:cO0WWftG2MG7QmPsKGCGUDSxO/D+Ya8SQZn3M:b0RfoTGEm0KGeDSxO/s8Sw8

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      e334a3b2d9187c1c1b95a1080a4819b6_JaffaCakes118

    • Size

      454KB

    • MD5

      e334a3b2d9187c1c1b95a1080a4819b6

    • SHA1

      27e9d384ee66a0d483d078bca77152ecd814ec52

    • SHA256

      dec5dace1bdfb490be6347de745ba489889ddceb44353106eec6f26a9b83d549

    • SHA512

      d47e337675f722c02f2d4423624d4c551e2d02b86edf134af4e64cf524fceb191430c5ae64cb3f0d068b58e893eca3221d1a2b18ed11aa462353fd04c90a3a71

    • SSDEEP

      12288:cO0WWftG2MG7QmPsKGCGUDSxO/D+Ya8SQZn3M:b0RfoTGEm0KGeDSxO/s8Sw8

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks