General
-
Target
JaffaCakes118_98f6d1e3731105cd4259e79a41c314e1c62454d39b8b0427b3ec0f789fb6bddc
-
Size
24KB
-
Sample
241221-3yh7bavkbz
-
MD5
1707c2be2eacf003e518c52123c121e1
-
SHA1
b83762f18620a60856c92ee84b83d60590c4bc8f
-
SHA256
98f6d1e3731105cd4259e79a41c314e1c62454d39b8b0427b3ec0f789fb6bddc
-
SHA512
dfaf2439b36e5893eb65a0e8a5408224359fb8abbd1d868c1dd987a6bb0035e9fa53b0442a2cfb70b66bbfdb99820caacb43378b14e86e4fb2b7c5ceadc9f739
-
SSDEEP
384:6tzIsi+G8kt0bjl8rGphjq3rmnohTjX7BsuqQ1MfM9/aGPP5Kia4Rr7aY/b0:Dsi+DbVppqbmnohTJj1dB3wA12Y/b0
Behavioral task
behavioral1
Sample
JaffaCakes118_98f6d1e3731105cd4259e79a41c314e1c62454d39b8b0427b3ec0f789fb6bddc.xls
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_98f6d1e3731105cd4259e79a41c314e1c62454d39b8b0427b3ec0f789fb6bddc.xls
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/download_exec
http://shinyobjects.birds:80/metal.exe
Targets
-
-
Target
JaffaCakes118_98f6d1e3731105cd4259e79a41c314e1c62454d39b8b0427b3ec0f789fb6bddc
-
Size
24KB
-
MD5
1707c2be2eacf003e518c52123c121e1
-
SHA1
b83762f18620a60856c92ee84b83d60590c4bc8f
-
SHA256
98f6d1e3731105cd4259e79a41c314e1c62454d39b8b0427b3ec0f789fb6bddc
-
SHA512
dfaf2439b36e5893eb65a0e8a5408224359fb8abbd1d868c1dd987a6bb0035e9fa53b0442a2cfb70b66bbfdb99820caacb43378b14e86e4fb2b7c5ceadc9f739
-
SSDEEP
384:6tzIsi+G8kt0bjl8rGphjq3rmnohTjX7BsuqQ1MfM9/aGPP5Kia4Rr7aY/b0:Dsi+DbVppqbmnohTJj1dB3wA12Y/b0
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-