General
-
Target
f66ac139d6c4ac033874fb1ff40fadc9_JaffaCakes118
-
Size
239KB
-
Sample
241216-apsp6stret
-
MD5
f66ac139d6c4ac033874fb1ff40fadc9
-
SHA1
78c74ad5dfff6929baa14db119b63e330f56db6f
-
SHA256
06b0feb0a8f8a27ba7f110230ad0e861fdb16c68a61d12b87c26e564d96575df
-
SHA512
db227edc213d1bd9b4c967f0550e2f9e13741a6988bf561717f4fcac735ba1edc43846f1300c0d1c61632c9933455efd9ea3437a365d7a3f0c6d2229b6b4b48d
-
SSDEEP
6144:pmobSO3LLHeqFRa5UbTyLwKTgtAivpmU0h0oZTZTZTZ:pmoOO3LDBI5UbTewJbvpx0h0o999
Static task
static1
Behavioral task
behavioral1
Sample
f66ac139d6c4ac033874fb1ff40fadc9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f66ac139d6c4ac033874fb1ff40fadc9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
f66ac139d6c4ac033874fb1ff40fadc9_JaffaCakes118
-
Size
239KB
-
MD5
f66ac139d6c4ac033874fb1ff40fadc9
-
SHA1
78c74ad5dfff6929baa14db119b63e330f56db6f
-
SHA256
06b0feb0a8f8a27ba7f110230ad0e861fdb16c68a61d12b87c26e564d96575df
-
SHA512
db227edc213d1bd9b4c967f0550e2f9e13741a6988bf561717f4fcac735ba1edc43846f1300c0d1c61632c9933455efd9ea3437a365d7a3f0c6d2229b6b4b48d
-
SSDEEP
6144:pmobSO3LLHeqFRa5UbTyLwKTgtAivpmU0h0oZTZTZTZ:pmoOO3LDBI5UbTewJbvpx0h0o999
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-