General

  • Target

    9a0e07bf7b0db03c864e5a59f503249e_JaffaCakes118

  • Size

    72KB

  • Sample

    240606-f8c2qaae43

  • MD5

    9a0e07bf7b0db03c864e5a59f503249e

  • SHA1

    061b6cb241a1b43590861ba347de8aa13cb48923

  • SHA256

    a387020dcdf22db01195442ce8b509a10bddc0a2bd1119b01653ed6770b01b06

  • SHA512

    39a2e29ceb18ceec2ad05cb0b6145fe1e2787bd88a5838d191039925941f61f67312850b77a35cdec5bdd2657b7ebb6c62d4a523823f99cfa2c339b4aa0f032f

  • SSDEEP

    1536:I/PV42yMdhEU/acdXIWEoiGMakCKt4nEMb+KR0Nc8QsJq39:yzyMdj/aEgS8yEe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

51.79.158.48:4040

Targets

    • Target

      9a0e07bf7b0db03c864e5a59f503249e_JaffaCakes118

    • Size

      72KB

    • MD5

      9a0e07bf7b0db03c864e5a59f503249e

    • SHA1

      061b6cb241a1b43590861ba347de8aa13cb48923

    • SHA256

      a387020dcdf22db01195442ce8b509a10bddc0a2bd1119b01653ed6770b01b06

    • SHA512

      39a2e29ceb18ceec2ad05cb0b6145fe1e2787bd88a5838d191039925941f61f67312850b77a35cdec5bdd2657b7ebb6c62d4a523823f99cfa2c339b4aa0f032f

    • SSDEEP

      1536:I/PV42yMdhEU/acdXIWEoiGMakCKt4nEMb+KR0Nc8QsJq39:yzyMdj/aEgS8yEe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks