General

  • Target

    033ef4567dd6bdc5f67bf0180e3330fa_JaffaCakes118

  • Size

    72KB

  • Sample

    240427-pmdwkaba9s

  • MD5

    033ef4567dd6bdc5f67bf0180e3330fa

  • SHA1

    d1ef10cdff5e4faa2a97c6127a3b03fb514e7b60

  • SHA256

    e066b62bacc2a2a0f90515c457e020c37fb2183ff022bee1d88efc927efdda80

  • SHA512

    31b7c28e90ccc93edd5db6c05104777c9573e9e146002ca4a2576f837a78d8ae3fb9cd774447d9fd9d5437cba379e206ae5d747463ba3c0097bfdbb7fa8569cd

  • SSDEEP

    1536:IsIopGnkDQRgkk+FJtRRMb+KR0Nc8QsJq39:FIopGnk0RgqFPe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

51.79.158.48:5555

Targets

    • Target

      033ef4567dd6bdc5f67bf0180e3330fa_JaffaCakes118

    • Size

      72KB

    • MD5

      033ef4567dd6bdc5f67bf0180e3330fa

    • SHA1

      d1ef10cdff5e4faa2a97c6127a3b03fb514e7b60

    • SHA256

      e066b62bacc2a2a0f90515c457e020c37fb2183ff022bee1d88efc927efdda80

    • SHA512

      31b7c28e90ccc93edd5db6c05104777c9573e9e146002ca4a2576f837a78d8ae3fb9cd774447d9fd9d5437cba379e206ae5d747463ba3c0097bfdbb7fa8569cd

    • SSDEEP

      1536:IsIopGnkDQRgkk+FJtRRMb+KR0Nc8QsJq39:FIopGnk0RgqFPe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks