General

  • Target

    e97360845c536734fbbe0762b063f76b_JaffaCakes118

  • Size

    34KB

  • Sample

    241213-cxejmawjaw

  • MD5

    e97360845c536734fbbe0762b063f76b

  • SHA1

    2cca23b7d2f7b04dab2312de80552cfb5dff1c6f

  • SHA256

    1ede71abb506ae8500747b52d7d3a55719a85fa8eb85140e8a1b6e7cb5a69449

  • SHA512

    5e2968467e1c35c95f11a2577d914ecff4e50a2e6de761e0a881e37ea5935b0ffc2c9a4b66c3575946422dcc7ccdb98f41732d8adc6ec06a5a308aa8393fea1d

  • SSDEEP

    768:sciYkKP4d53ULm+Y6s8RA/B8z8qaT1yJeNniEq7kPTaCA:lDFC16sk8qakARWkraCA

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      e97360845c536734fbbe0762b063f76b_JaffaCakes118

    • Size

      34KB

    • MD5

      e97360845c536734fbbe0762b063f76b

    • SHA1

      2cca23b7d2f7b04dab2312de80552cfb5dff1c6f

    • SHA256

      1ede71abb506ae8500747b52d7d3a55719a85fa8eb85140e8a1b6e7cb5a69449

    • SHA512

      5e2968467e1c35c95f11a2577d914ecff4e50a2e6de761e0a881e37ea5935b0ffc2c9a4b66c3575946422dcc7ccdb98f41732d8adc6ec06a5a308aa8393fea1d

    • SSDEEP

      768:sciYkKP4d53ULm+Y6s8RA/B8z8qaT1yJeNniEq7kPTaCA:lDFC16sk8qakARWkraCA

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks