General

  • Target

    05eadb2ea450ae1e1d6c78265a45580b_JaffaCakes118

  • Size

    72KB

  • Sample

    240624-a5z47a1eld

  • MD5

    05eadb2ea450ae1e1d6c78265a45580b

  • SHA1

    66cf207196d2a6a0cfc43b4f12dfce2afa5dccda

  • SHA256

    d9397375bd7e464713ea9e0a234e30223137a394c7b629e00f4f26d29619a7fb

  • SHA512

    68df4817032b12de087dd7a00e0ce6ea6d0825c09b9e8ff530346a5f082d01da3915451d33482e2dde6f34816ac6b45e83380a4cc272e777e5e279494e8f5b0b

  • SSDEEP

    1536:Iuv7Qldr8p1KcaW4bRQtPaMb+KR0Nc8QsJq39:zv7ErG1AQtie0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.199.129:4444

Targets

    • Target

      05eadb2ea450ae1e1d6c78265a45580b_JaffaCakes118

    • Size

      72KB

    • MD5

      05eadb2ea450ae1e1d6c78265a45580b

    • SHA1

      66cf207196d2a6a0cfc43b4f12dfce2afa5dccda

    • SHA256

      d9397375bd7e464713ea9e0a234e30223137a394c7b629e00f4f26d29619a7fb

    • SHA512

      68df4817032b12de087dd7a00e0ce6ea6d0825c09b9e8ff530346a5f082d01da3915451d33482e2dde6f34816ac6b45e83380a4cc272e777e5e279494e8f5b0b

    • SSDEEP

      1536:Iuv7Qldr8p1KcaW4bRQtPaMb+KR0Nc8QsJq39:zv7ErG1AQtie0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks