General

  • Target

    JaffaCakes118_6a83c02c4bcf0e9f06509bf767f984e7

  • Size

    72KB

  • Sample

    250103-f72zfs1mex

  • MD5

    6a83c02c4bcf0e9f06509bf767f984e7

  • SHA1

    25a666e067c921b2bad9f72880df29debb1170d8

  • SHA256

    d1b9fc5a5e948d3039dd523ec96c4fad1c35458a10fa5a8a0bfeec03e3e6a600

  • SHA512

    0125f4a7690ff0fdc254e24d69720735f290d991920e3bd97766e70620bba54c16ebd738ee14eb7dc78e4350def3cf594680b09b37fbcf5ce2f19014b495f4f4

  • SSDEEP

    1536:Ipv4gDankxXUsdiqKGrz20xPb2cM0QNSYgPIaRMb+KR0Nc8QsJq39:qvnankxksz720xVxQhgPIAe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/exec

Targets

    • Target

      JaffaCakes118_6a83c02c4bcf0e9f06509bf767f984e7

    • Size

      72KB

    • MD5

      6a83c02c4bcf0e9f06509bf767f984e7

    • SHA1

      25a666e067c921b2bad9f72880df29debb1170d8

    • SHA256

      d1b9fc5a5e948d3039dd523ec96c4fad1c35458a10fa5a8a0bfeec03e3e6a600

    • SHA512

      0125f4a7690ff0fdc254e24d69720735f290d991920e3bd97766e70620bba54c16ebd738ee14eb7dc78e4350def3cf594680b09b37fbcf5ce2f19014b495f4f4

    • SSDEEP

      1536:Ipv4gDankxXUsdiqKGrz20xPb2cM0QNSYgPIaRMb+KR0Nc8QsJq39:qvnankxksz720xVxQhgPIAe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

MITRE ATT&CK Enterprise v15

Tasks