General

  • Target

    5f0cfab7a17f1d1de874b33150f88961_JaffaCakes118

  • Size

    72KB

  • MD5

    5f0cfab7a17f1d1de874b33150f88961

  • SHA1

    a6ac15c930921e24ef8ad2f9935971ac421d403a

  • SHA256

    809aafea17f3d05fd0cc7e3f2f81a276ecf70cc08abee9d541dd6baa66eb978d

  • SHA512

    68c788c0f06f8ad07c056c1f0a5c27cd1eae0bca66a110e089c5e64f7e99a4cf5270a9a89604916cef3d0fa89d75eab154ea43df0908065be139ec24cd75002f

  • SSDEEP

    1536:IgOGNxSWMtyIvsj2xBi8/XL4k5vdFMb+KR0Nc8QsJq39:XODW3j8iYLL5vdFe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.148:4455

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f0cfab7a17f1d1de874b33150f88961_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections