General

  • Target

    84f268607a46fd33b6661f22ab02b3ed_JaffaCakes118

  • Size

    72KB

  • MD5

    84f268607a46fd33b6661f22ab02b3ed

  • SHA1

    03f8fcb7b7435238d8d56ee464c9d95ca0d93612

  • SHA256

    185cf5a052995d823089170cbbb4a253fe96a9b7212cb775366f0c3cd5024043

  • SHA512

    a1488cf973ccaa530a7ec1e76c2a1fad5c6b18265e992f5379b9f8cc73c6d5763557a55cb8b152eb85279f610118546d495e6051fbf326cd4c072604e796b2d1

  • SSDEEP

    1536:IBWXKwy6cvAbu4WoFoKMgmzAMb+KR0Nc8QsJq39:tXxavAbu4WoFoKn2Ae0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.96:4321

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 84f268607a46fd33b6661f22ab02b3ed_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections