General

  • Target

    JaffaCakes118_6730c02c0ed0592d662a08fa87aef24d

  • Size

    218KB

  • Sample

    250102-wyjphstmdm

  • MD5

    6730c02c0ed0592d662a08fa87aef24d

  • SHA1

    644b15d1dde9e6cfcf66cd57143604587f014d1f

  • SHA256

    7f9dde1f115cde459c0643ac2d9aa7c740ad3892463844cd2f3a35075251706b

  • SHA512

    1dc4b71ce9336ed86aa9c84622f3fd501e111b46605cb09a7c6600a042bd6692afebf8255eb875dee9eeb182389e43fb0589b613217321c701c8410c0fc97bfa

  • SSDEEP

    6144:vOO1k4nDWgRAkPHXHYZfeGhFs3k6wV/bkBZ6Y82xspLZ8/lY:vOOfR3PHoZWyFsQV/YBZ182epmNY

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      JaffaCakes118_6730c02c0ed0592d662a08fa87aef24d

    • Size

      218KB

    • MD5

      6730c02c0ed0592d662a08fa87aef24d

    • SHA1

      644b15d1dde9e6cfcf66cd57143604587f014d1f

    • SHA256

      7f9dde1f115cde459c0643ac2d9aa7c740ad3892463844cd2f3a35075251706b

    • SHA512

      1dc4b71ce9336ed86aa9c84622f3fd501e111b46605cb09a7c6600a042bd6692afebf8255eb875dee9eeb182389e43fb0589b613217321c701c8410c0fc97bfa

    • SSDEEP

      6144:vOO1k4nDWgRAkPHXHYZfeGhFs3k6wV/bkBZ6Y82xspLZ8/lY:vOOfR3PHoZWyFsQV/YBZ182epmNY

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks