General

  • Target

    457ea7c8adcdeaf7e4f6b2143e90a320_JaffaCakes118

  • Size

    72KB

  • Sample

    240515-k9sk1saf9v

  • MD5

    457ea7c8adcdeaf7e4f6b2143e90a320

  • SHA1

    2f97c7462cdfdfca44d36f60e4909af1e07a7266

  • SHA256

    7af256884c097ba2fe9a91f94509affc5d0c6c32ea7e2e2ef4f9e069cf47babe

  • SHA512

    d29cfa2fbf2d1296971fdc27114aac8760f972dda08e1015faf92021738e63c5a6c33ec95d34fa58bad64b35014fb43a27a107c67955c43127aabd2902c2d214

  • SSDEEP

    1536:IF7BOEOn1vvcSyUgi0rFWRmJNSpMb+KR0Nc8QsJq39:6FO5pfgX0mL+e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

167.250.49.155:5555

Targets

    • Target

      457ea7c8adcdeaf7e4f6b2143e90a320_JaffaCakes118

    • Size

      72KB

    • MD5

      457ea7c8adcdeaf7e4f6b2143e90a320

    • SHA1

      2f97c7462cdfdfca44d36f60e4909af1e07a7266

    • SHA256

      7af256884c097ba2fe9a91f94509affc5d0c6c32ea7e2e2ef4f9e069cf47babe

    • SHA512

      d29cfa2fbf2d1296971fdc27114aac8760f972dda08e1015faf92021738e63c5a6c33ec95d34fa58bad64b35014fb43a27a107c67955c43127aabd2902c2d214

    • SSDEEP

      1536:IF7BOEOn1vvcSyUgi0rFWRmJNSpMb+KR0Nc8QsJq39:6FO5pfgX0mL+e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks