General

  • Target

    912c0b6cf1818352c4f8b8d875c5fe5a_JaffaCakes118

  • Size

    72KB

  • Sample

    240603-kp4sjshd8v

  • MD5

    912c0b6cf1818352c4f8b8d875c5fe5a

  • SHA1

    e783b0cb1cf1cf7f8857891f62a031e9334685ec

  • SHA256

    278250285ac2b215e27f526d101aff7681a50c65780193a8ff7f521d6e7151b4

  • SHA512

    e4ea4fd627659d9659bbd37076f2b3fd9523256bfca3ffce8de7834fb4209b737643de7d14beb521bf4876bafcabc956cbfaa19d45aca31a1467c0340369f7eb

  • SSDEEP

    1536:Ioj3jT9hlEkRYvMzXYK/m6IZBJsMb+KR0Nc8QsJq39:bj3XJ/zzXYVEe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

81.17.25.9:1339

Targets

    • Target

      912c0b6cf1818352c4f8b8d875c5fe5a_JaffaCakes118

    • Size

      72KB

    • MD5

      912c0b6cf1818352c4f8b8d875c5fe5a

    • SHA1

      e783b0cb1cf1cf7f8857891f62a031e9334685ec

    • SHA256

      278250285ac2b215e27f526d101aff7681a50c65780193a8ff7f521d6e7151b4

    • SHA512

      e4ea4fd627659d9659bbd37076f2b3fd9523256bfca3ffce8de7834fb4209b737643de7d14beb521bf4876bafcabc956cbfaa19d45aca31a1467c0340369f7eb

    • SSDEEP

      1536:Ioj3jT9hlEkRYvMzXYK/m6IZBJsMb+KR0Nc8QsJq39:bj3XJ/zzXYVEe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks