General

  • Target
    112545ce8d8f7540ccb721fc48aae555_JaffaCakes118
  • Size 31KB
  • Sample240504-b4st6ada76
  • SHA256 e317815f5173425f785998bea9e1f5c2951581877596941b5efe745f7483a6a6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • metasploit

Version
  • windows/reverse_tcp

C2
  • 192.168.198.145:443

Targets

    • Target
      112545ce8d8f7540ccb721fc48aae555_JaffaCakes118
    • Size 31KB
    • SHA256 e317815f5173425f785998bea9e1f5c2951581877596941b5efe745f7483a6a6
    • MD5 SHA1 SHA512 SSDEEP
    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

MITRE ATT&CK Enterprise v15

Tasks