General

  • Target

    JaffaCakes118_fc39481a7094a6c13b0d19c7b534636767e700bfab4be46709f8bb0cf9f12f51

  • Size

    245KB

  • Sample

    241225-1x4qhsyrgt

  • MD5

    af2ecc441a5cf0c0c7041cc6d86e5296

  • SHA1

    accd0d217902ffcd51cee82c9631e944a943cee0

  • SHA256

    fc39481a7094a6c13b0d19c7b534636767e700bfab4be46709f8bb0cf9f12f51

  • SHA512

    6a775d923b3144fa5b040be4655319ed5b46708991d9e434f30620fdede851aed41701a7e85621c12a58c9d4437c05e65bfd993192484956ac33a9a4ce1e656d

  • SSDEEP

    6144:5qGdXu6ws0Nc8QsaMAPAYGRegz76mHS8DUM0ZdqRLSw5+7kq:plu6/f/n4e660UMyqRLSLw

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      JaffaCakes118_fc39481a7094a6c13b0d19c7b534636767e700bfab4be46709f8bb0cf9f12f51

    • Size

      245KB

    • MD5

      af2ecc441a5cf0c0c7041cc6d86e5296

    • SHA1

      accd0d217902ffcd51cee82c9631e944a943cee0

    • SHA256

      fc39481a7094a6c13b0d19c7b534636767e700bfab4be46709f8bb0cf9f12f51

    • SHA512

      6a775d923b3144fa5b040be4655319ed5b46708991d9e434f30620fdede851aed41701a7e85621c12a58c9d4437c05e65bfd993192484956ac33a9a4ce1e656d

    • SSDEEP

      6144:5qGdXu6ws0Nc8QsaMAPAYGRegz76mHS8DUM0ZdqRLSw5+7kq:plu6/f/n4e660UMyqRLSLw

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks