General

  • Target

    074c7b49985a9cbdd47c45354881ae6d_JaffaCakes118

  • Size

    210KB

  • Sample

    240624-jrgv5a1hnd

  • MD5

    074c7b49985a9cbdd47c45354881ae6d

  • SHA1

    d67cae229fc3006d21aa0d2414a3f99f8b005f09

  • SHA256

    2fb3dc9717d6957c1b1af2e10c79728f1a8f1b684d6f833056f47b3f727f8eca

  • SHA512

    963ddce34897096cbe0d7199ba018dbc64a8df48f1c7cc50d128f2afedd2c00126da2eb91cb1e890e840abf2ddf7c082b1ba40cb805468ecd897f7e8a1d9d79e

  • SSDEEP

    6144:Du6xjcKMeJu09TxRmAEYq+fcYjuhRtsGhr9:51M7MIAhcY4aa

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

77.49.206.172:443

Targets

    • Target

      074c7b49985a9cbdd47c45354881ae6d_JaffaCakes118

    • Size

      210KB

    • MD5

      074c7b49985a9cbdd47c45354881ae6d

    • SHA1

      d67cae229fc3006d21aa0d2414a3f99f8b005f09

    • SHA256

      2fb3dc9717d6957c1b1af2e10c79728f1a8f1b684d6f833056f47b3f727f8eca

    • SHA512

      963ddce34897096cbe0d7199ba018dbc64a8df48f1c7cc50d128f2afedd2c00126da2eb91cb1e890e840abf2ddf7c082b1ba40cb805468ecd897f7e8a1d9d79e

    • SSDEEP

      6144:Du6xjcKMeJu09TxRmAEYq+fcYjuhRtsGhr9:51M7MIAhcY4aa

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks