General

  • Target

    f032eebe986f310326283b4954d1bfb1_JaffaCakes118

  • Size

    69KB

  • Sample

    241214-xj4a2sspej

  • MD5

    f032eebe986f310326283b4954d1bfb1

  • SHA1

    11533bd4162a1de7f1d1dc346e5dca36cafc8823

  • SHA256

    f497a8c3e542d45820aabfe805c584b4e24408cab58ae83e137d993cbb9aab3e

  • SHA512

    859df7be9042458f912fbfe25bc33448330cf0778b4390d4e1f0ce015a580197d97eae547f33c21c69c41354e380a64b84f8a64cd79b9fc514d72b424f98c7b0

  • SSDEEP

    1536:STEKV+zoxoXIy7GArumtE6/3Rvs93P9l5geRsO7rg:SBQzoxCv7ZtE6/RE9l9Js

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      f032eebe986f310326283b4954d1bfb1_JaffaCakes118

    • Size

      69KB

    • MD5

      f032eebe986f310326283b4954d1bfb1

    • SHA1

      11533bd4162a1de7f1d1dc346e5dca36cafc8823

    • SHA256

      f497a8c3e542d45820aabfe805c584b4e24408cab58ae83e137d993cbb9aab3e

    • SHA512

      859df7be9042458f912fbfe25bc33448330cf0778b4390d4e1f0ce015a580197d97eae547f33c21c69c41354e380a64b84f8a64cd79b9fc514d72b424f98c7b0

    • SSDEEP

      1536:STEKV+zoxoXIy7GArumtE6/3Rvs93P9l5geRsO7rg:SBQzoxCv7ZtE6/RE9l9Js

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks