Analysis
- max time kernel
105s - max time network
100s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
24/06/2024, 08:55
General
- Target 0790dc09a00682c0c17e20005153fcb6_JaffaCakes118.exe
- Size 7KB
- Sample240624-kvvrtstgjg
- SHA256 587f80f9b37881dbd61d7dbea38574972c46f5ecaa45fe0787bd84a3e8db8443
Score
10/10
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
192.168.0.3:9090
Signatures
- MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0790dc09a00682c0c17e20005153fcb6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0790dc09a00682c0c17e20005153fcb6_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3356-0-0x0000000000400000-0x0000000000407000-memory.dmp
memory/3356-10-0x0000000000400000-0x0000000000407000-memory.dmp