General

  • Target

    JaffaCakes118_1fadab489997035f530de69ec7b6bd026b9ec75f7d86d477e68ed38eb661a11e

  • Size

    4.4MB

  • Sample

    241225-qszwnatqbw

  • MD5

    9b09bb786f415c5fee6f6f34b23cf28e

  • SHA1

    00d6cd58e2cd932151c18b5c285d8a7e7a6d4aa2

  • SHA256

    1fadab489997035f530de69ec7b6bd026b9ec75f7d86d477e68ed38eb661a11e

  • SHA512

    8af5ca72e77c759bdf61b1ed58aa6f61f0c406c4075e6e3f3ff6587dfe65c59b25565969be24a6a6fbf7aaadbef8c88076b74d6fa9888dd38bdcedd6f263e7ba

  • SSDEEP

    98304:VTob8QH57XzQ0W/F92bARPxCzl1XTS8Li1EoYYRQN36V4FJYzLr/f+MXVmd:2bBlXsj/F9IKcR1EeYRw6CbYzGMFmd

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      JaffaCakes118_1fadab489997035f530de69ec7b6bd026b9ec75f7d86d477e68ed38eb661a11e

    • Size

      4.4MB

    • MD5

      9b09bb786f415c5fee6f6f34b23cf28e

    • SHA1

      00d6cd58e2cd932151c18b5c285d8a7e7a6d4aa2

    • SHA256

      1fadab489997035f530de69ec7b6bd026b9ec75f7d86d477e68ed38eb661a11e

    • SHA512

      8af5ca72e77c759bdf61b1ed58aa6f61f0c406c4075e6e3f3ff6587dfe65c59b25565969be24a6a6fbf7aaadbef8c88076b74d6fa9888dd38bdcedd6f263e7ba

    • SSDEEP

      98304:VTob8QH57XzQ0W/F92bARPxCzl1XTS8Li1EoYYRQN36V4FJYzLr/f+MXVmd:2bBlXsj/F9IKcR1EeYRw6CbYzGMFmd

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba family

    • Glupteba payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks