Overview

overview

10

Static

static

3

18bd01d1e1...18.exe

windows7-x64

10

18bd01d1e1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18bd01d1e1ff0e94f41946332d59dbad_JaffaCakes118

  • Size

    9.7MB

  • Sample

    240628-et1nsstbpp

  • MD5

    18bd01d1e1ff0e94f41946332d59dbad

  • SHA1

    62e8d7c975d1ec895af6cbc725e1eb9c5e5ee069

  • SHA256

    73be46a3d3b65fb6a46399dd8bf31e82090716855f784856bf5033990c356ea9

  • SHA512

    ecbf831a6f8dfc01257f138363cd265ab1c907b88b891902b14dac9d5474e3160b9496993484660fcf0b9853cbb73e21c249786c973217284a48ea3fcd3f8ff1

  • SSDEEP

    12288:ZLN4dRboHyLnc8Qfy8n8sTVQlr2UqOsl539wjZ:ZLN4vQq8ndVQUUqOsl539wjZ

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      18bd01d1e1ff0e94f41946332d59dbad_JaffaCakes118

    • Size

      9.7MB

    • MD5

      18bd01d1e1ff0e94f41946332d59dbad

    • SHA1

      62e8d7c975d1ec895af6cbc725e1eb9c5e5ee069

    • SHA256

      73be46a3d3b65fb6a46399dd8bf31e82090716855f784856bf5033990c356ea9

    • SHA512

      ecbf831a6f8dfc01257f138363cd265ab1c907b88b891902b14dac9d5474e3160b9496993484660fcf0b9853cbb73e21c249786c973217284a48ea3fcd3f8ff1

    • SSDEEP

      12288:ZLN4dRboHyLnc8Qfy8n8sTVQlr2UqOsl539wjZ:ZLN4vQq8ndVQUUqOsl539wjZ

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks