General

  • Target

    8d9c8f80ae9ae1b0cb6fa6f97d150d16_JaffaCakes118

  • Size

    14KB

  • Sample

    240602-le7bcshb9v

  • MD5

    8d9c8f80ae9ae1b0cb6fa6f97d150d16

  • SHA1

    759950b6728038718b2776286ef22c748b356d46

  • SHA256

    e94f1b3fd9f3fdb511699c19aef46afcc5bd0c801188e9b561923faf84606a72

  • SHA512

    6b4671bcb3a9fadf988e55a8e07951588cd4be8d64605edc99a4129252a3d54fd4a88037911d25994e537f9b05c387f3259260f5f5ee664420dcace82f3ee54e

  • SSDEEP

    192:IHSykZahxHn9QgyBtX4SR4wefaNZloRK/SjN7AGY:cSykyDyLXrRwaNZXyAp

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://5.39.219.15:8383/hISX

Targets

    • Target

      8d9c8f80ae9ae1b0cb6fa6f97d150d16_JaffaCakes118

    • Size

      14KB

    • MD5

      8d9c8f80ae9ae1b0cb6fa6f97d150d16

    • SHA1

      759950b6728038718b2776286ef22c748b356d46

    • SHA256

      e94f1b3fd9f3fdb511699c19aef46afcc5bd0c801188e9b561923faf84606a72

    • SHA512

      6b4671bcb3a9fadf988e55a8e07951588cd4be8d64605edc99a4129252a3d54fd4a88037911d25994e537f9b05c387f3259260f5f5ee664420dcace82f3ee54e

    • SSDEEP

      192:IHSykZahxHn9QgyBtX4SR4wefaNZloRK/SjN7AGY:cSykyDyLXrRwaNZXyAp

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks