Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
29-05-2024 01:51
General
-
Target
7f228ff326c411367eecb4546017488d_JaffaCakes118.exe
-
Size
422KB
-
MD5
7f228ff326c411367eecb4546017488d
-
SHA1
210a6d627306cafb33dc4a38e397797574a6de50
-
SHA256
4ea991d498b22ccf58830b99fd01db539b4ba84f7fe5e5d9170ab102ff78fad1
-
SHA512
be486e9e808bf7b92ceb2f67e4c963bbb46acd73e4429f113a3caa8d5efbcd57faeb73c9e74e75325e4db94dccb36896fed16f656aa7c96ca17f9afd04a13b5c
-
SSDEEP
12288:0YCZ7HwHkW7qhDQEboh5evbxuPX38aQr1M:0ZbobAMm
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
47.116.128.244:5331
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7f228ff326c411367eecb4546017488d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\7f228ff326c411367eecb4546017488d_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
608KB
-
Filesize
4KB
-
Filesize
608KB