General
-
Target
14aa4505080eb5b39135019e082ef5a6_JaffaCakes118
-
Size
110KB
-
Sample
240627-eyy1rssbnh
-
MD5
14aa4505080eb5b39135019e082ef5a6
-
SHA1
f6f40c4841d37937bc801a0e724802cc0d4fd754
-
SHA256
2967929dfe8d847dea9a4a1a65dba06d336691fd2990294b6da434825489852c
-
SHA512
9efc0ec5664c6da4e7cead1bd5dfc7ad7a0ca2bf0fcf3348131bcc85f67795b62ccc6079445034839877d11f22424041b548e3eedad3c90d13950bdba20af8c0
-
SSDEEP
1536:d8kp5OnbsmqxpOxy4bu30/8bCOhmetzSP0vcf5XsVoJi3nEl/qWU4YoMVq3:u6InbqLH4buEkbEyjS5tKEl/xUbob3
Behavioral task
behavioral1
Sample
14aa4505080eb5b39135019e082ef5a6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
14aa4505080eb5b39135019e082ef5a6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
14aa4505080eb5b39135019e082ef5a6_JaffaCakes118
-
Size
110KB
-
MD5
14aa4505080eb5b39135019e082ef5a6
-
SHA1
f6f40c4841d37937bc801a0e724802cc0d4fd754
-
SHA256
2967929dfe8d847dea9a4a1a65dba06d336691fd2990294b6da434825489852c
-
SHA512
9efc0ec5664c6da4e7cead1bd5dfc7ad7a0ca2bf0fcf3348131bcc85f67795b62ccc6079445034839877d11f22424041b548e3eedad3c90d13950bdba20af8c0
-
SSDEEP
1536:d8kp5OnbsmqxpOxy4bu30/8bCOhmetzSP0vcf5XsVoJi3nEl/qWU4YoMVq3:u6InbqLH4buEkbEyjS5tKEl/xUbob3
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-