Overview

overview

10

Static

static

3

0503c0bd8a...18.exe

windows7-x64

10

0503c0bd8a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0503c0bd8abd3259151442e3d38d6e0c_JaffaCakes118

  • Size

    4.6MB

  • Sample

    240428-mtzqhadh62

  • MD5

    0503c0bd8abd3259151442e3d38d6e0c

  • SHA1

    21aff5d39bfea185cab98ded5ea2e12d2a44d642

  • SHA256

    036392b3db2f58b414fa99bd4ff3b6b9d6aaea749bd9da3bca93714268070091

  • SHA512

    db2e77e131a3acec84adb265f23df211f44032b37cdc9689c1d3fd232237d66b6cf81b3a84226571ef91d86d75ac8713e777b9cd83faf5fe5458276f2dca1567

  • SSDEEP

    98304:/FHQcsibw8SPLeTtSQo598DERxrfExYza/FpJHFX5dFs0:NwcXMHLKyGtxVTZvb

Score
10/10
metasploitbackdoorpyinstallertrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

177.89.155.49:4444

Targets

    • Target

      0503c0bd8abd3259151442e3d38d6e0c_JaffaCakes118

    • Size

      4.6MB

    • MD5

      0503c0bd8abd3259151442e3d38d6e0c

    • SHA1

      21aff5d39bfea185cab98ded5ea2e12d2a44d642

    • SHA256

      036392b3db2f58b414fa99bd4ff3b6b9d6aaea749bd9da3bca93714268070091

    • SHA512

      db2e77e131a3acec84adb265f23df211f44032b37cdc9689c1d3fd232237d66b6cf81b3a84226571ef91d86d75ac8713e777b9cd83faf5fe5458276f2dca1567

    • SSDEEP

      98304:/FHQcsibw8SPLeTtSQo598DERxrfExYza/FpJHFX5dFs0:NwcXMHLKyGtxVTZvb

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks