General

  • Target

    JaffaCakes118_974de6c9b6303dc2b212582adeeb0568

  • Size

    22KB

  • Sample

    250329-yy66xszzbw

  • MD5

    974de6c9b6303dc2b212582adeeb0568

  • SHA1

    6f2c682b900cf3813dffc4319b6278827fdbb068

  • SHA256

    2ae50d094355db5145099e907568574ca0b28415c80610d4707e72241e3095de

  • SHA512

    c209c6c05fa082fc04e848bc652f983dc94e28c156a12b4bb6263ad6a0aa5ea647335a65cac9402bb0c1aae10c233ce373bf2164664133fd3437a9a51bedbc5d

  • SSDEEP

    384:jue6XxZmlB/uaD0criC+kc14aH7RD45tT7CRpwLj9DCS/lw/xJGeoP+KHJY:67ElB/QXPksvHhqtT7XL5w/xweo2KHJY

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      JaffaCakes118_974de6c9b6303dc2b212582adeeb0568

    • Size

      22KB

    • MD5

      974de6c9b6303dc2b212582adeeb0568

    • SHA1

      6f2c682b900cf3813dffc4319b6278827fdbb068

    • SHA256

      2ae50d094355db5145099e907568574ca0b28415c80610d4707e72241e3095de

    • SHA512

      c209c6c05fa082fc04e848bc652f983dc94e28c156a12b4bb6263ad6a0aa5ea647335a65cac9402bb0c1aae10c233ce373bf2164664133fd3437a9a51bedbc5d

    • SSDEEP

      384:jue6XxZmlB/uaD0criC+kc14aH7RD45tT7CRpwLj9DCS/lw/xJGeoP+KHJY:67ElB/QXPksvHhqtT7XL5w/xweo2KHJY

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks