General
-
Target
fe1332473563e13ed67c105c54cb17e1_JaffaCakes118
-
Size
70KB
-
Sample
241219-cx3w8asrhw
-
MD5
fe1332473563e13ed67c105c54cb17e1
-
SHA1
69accbb16f26724b17c26571e21010cbb08f91a0
-
SHA256
599784a3ad4502ab1992ee62b23f5ef87e77bb68965e4de362e8e04a244c2c27
-
SHA512
1e1e627fd7dc5b7a9de671ae27ac968d8249f963a7a7e84261967b8a0b3b442123590070740277261050a9a36a6837dec7b1cbf1bf7e2f08dab7fdeba6fe2885
-
SSDEEP
1536:EpruGgy7+76iC+s4RhzK3lhIB1pE70ZswU2hjh06DRQN4iDQ0jWG5:8ruGFoC+s44lhY5BU2hjhTCCiDF
Static task
static1
Behavioral task
behavioral1
Sample
fe1332473563e13ed67c105c54cb17e1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe1332473563e13ed67c105c54cb17e1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
fe1332473563e13ed67c105c54cb17e1_JaffaCakes118
-
Size
70KB
-
MD5
fe1332473563e13ed67c105c54cb17e1
-
SHA1
69accbb16f26724b17c26571e21010cbb08f91a0
-
SHA256
599784a3ad4502ab1992ee62b23f5ef87e77bb68965e4de362e8e04a244c2c27
-
SHA512
1e1e627fd7dc5b7a9de671ae27ac968d8249f963a7a7e84261967b8a0b3b442123590070740277261050a9a36a6837dec7b1cbf1bf7e2f08dab7fdeba6fe2885
-
SSDEEP
1536:EpruGgy7+76iC+s4RhzK3lhIB1pE70ZswU2hjh06DRQN4iDQ0jWG5:8ruGFoC+s44lhY5BU2hjhTCCiDF
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-