Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
02-08-2024 05:31
General
-
Target
83365911e1ec3d7c8a96c7c9f47c908c_JaffaCakes118.exe
-
Size
472KB
-
MD5
83365911e1ec3d7c8a96c7c9f47c908c
-
SHA1
70b596d3d7c8ee884eff53e9d5a727bb8d497d4a
-
SHA256
a8a81d8bb4e00d273e8204581a67c5334d512bfb574e0e23d61aa0766a6517c7
-
SHA512
cc445371b92ddb2a3697c84a70318776a284893b3d855a17881ef7db3f366fcb0b491b199b4cd6e307387253186f90d39b348986c7ff4e2cd3d61a7e67914bc8
-
SSDEEP
12288:nrGzX20UB9spsSIZjhzNSFgGs4LdnV6I:ir2hbSA17GsWdV6
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\83365911e1ec3d7c8a96c7c9f47c908c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\83365911e1ec3d7c8a96c7c9f47c908c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB