General

  • Target

    JaffaCakes118_0234e4e93819712317fe80613084e2e3

  • Size

    42KB

  • Sample

    250121-fsgd7sxqcw

  • MD5

    0234e4e93819712317fe80613084e2e3

  • SHA1

    be7c433daa1780e3cb3f83de398ae4576911dbe9

  • SHA256

    afe0f99ff06bbe93703b5a470b4cb0efe070786b0d43d08c290f8efe7f47b184

  • SHA512

    8256dcddb1baae4b6f6305c1683f4ad691d4bf9d3da1d107fdca49c799afcaf7463a966dd3702757e70dab1816711bdb387350f0a76c58672f14b28b39e45692

  • SSDEEP

    768:0uCkdC2D5z4oWV0OCAB4Rld8Inv47pwMnrRCTuK1:0jkdjl8WK4RP84vkR4

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      JaffaCakes118_0234e4e93819712317fe80613084e2e3

    • Size

      42KB

    • MD5

      0234e4e93819712317fe80613084e2e3

    • SHA1

      be7c433daa1780e3cb3f83de398ae4576911dbe9

    • SHA256

      afe0f99ff06bbe93703b5a470b4cb0efe070786b0d43d08c290f8efe7f47b184

    • SHA512

      8256dcddb1baae4b6f6305c1683f4ad691d4bf9d3da1d107fdca49c799afcaf7463a966dd3702757e70dab1816711bdb387350f0a76c58672f14b28b39e45692

    • SSDEEP

      768:0uCkdC2D5z4oWV0OCAB4Rld8Inv47pwMnrRCTuK1:0jkdjl8WK4RP84vkR4

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks