Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
25-07-2024 14:50
General
-
Target
700aa6f2db2719c45d2c74f97fc38c85_JaffaCakes118.exe
-
Size
67KB
-
MD5
700aa6f2db2719c45d2c74f97fc38c85
-
SHA1
867917042e472f30561a71fb08bedf40a8886b53
-
SHA256
01dd657c7996b10d3594c5c1c4503b4e2dd3f852e9dee6d8e61fca5cd8fd9d16
-
SHA512
27bbcf4419d97bc50111061baf47b8cc3bd002dd14480f8db34467769e21eb57e8541b12dd876700d0ec3e43e558d03cab2aec3d907472da91e17beceb9345c4
-
SSDEEP
1536:O4tNIprdp06yX2EogBMoM9Q7Pp+r1oJUEbooPRrKKRoO3:epD06yX2pgBWQDp+r+JltZrpRoO3
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
23.20.214.27:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\700aa6f2db2719c45d2c74f97fc38c85_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\700aa6f2db2719c45d2c74f97fc38c85_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB