General

  • Target

    ebc978529ca612744951864e687132bf_JaffaCakes118

  • Size

    55KB

  • Sample

    241213-q18hrszpaz

  • MD5

    ebc978529ca612744951864e687132bf

  • SHA1

    1431f47f9887416c4767ca24fcc4acf6100e64e0

  • SHA256

    6e92ac54163604f61507c1d816dac368e2195555517ac70f380b7d8d1a317a9f

  • SHA512

    140ab1119c9d6a60a1dd50aa44984c355f44a3b7720a6e823b1fbcccefe5b04dcd2916a9765cc1b62fd0af07fddbf1defc7e15943a04bc4594f626ea97866833

  • SSDEEP

    768:0Rviavs7+c+H9mQYqzP637Hruh7ne2fWeqptXuxXcX1bT4AIUSh:0RqavVc+H9fY137HrlKWfuxm1bT40u

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      ebc978529ca612744951864e687132bf_JaffaCakes118

    • Size

      55KB

    • MD5

      ebc978529ca612744951864e687132bf

    • SHA1

      1431f47f9887416c4767ca24fcc4acf6100e64e0

    • SHA256

      6e92ac54163604f61507c1d816dac368e2195555517ac70f380b7d8d1a317a9f

    • SHA512

      140ab1119c9d6a60a1dd50aa44984c355f44a3b7720a6e823b1fbcccefe5b04dcd2916a9765cc1b62fd0af07fddbf1defc7e15943a04bc4594f626ea97866833

    • SSDEEP

      768:0Rviavs7+c+H9mQYqzP637Hruh7ne2fWeqptXuxXcX1bT4AIUSh:0RqavVc+H9fY137HrlKWfuxm1bT40u

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks