General

  • Target

    abf7171c97af206f43bf9befae0f6872_JaffaCakes118

  • Size

    72KB

  • Sample

    240819-wa41js1epl

  • MD5

    abf7171c97af206f43bf9befae0f6872

  • SHA1

    4b226b024268ffac42d798f7a8720981bcbeff0c

  • SHA256

    90c4f4608856a5b760067e2e2deba0ebc7136e02c784661b0ea75c89f5ef435a

  • SHA512

    46ef6355d13a161a999cc8f54f62005b1e7ef42c986b43a2cdc7301c16e6c2001e8e27f520903e1978eb5753edfe5ffa774eeb5b642e7212681950cea4586ec2

  • SSDEEP

    1536:IbwXfBlWa6B0MwH7/uDLxNalmMb+KR0Nc8QsJq39:0iffCm74xIUe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.8:666

Targets

    • Target

      abf7171c97af206f43bf9befae0f6872_JaffaCakes118

    • Size

      72KB

    • MD5

      abf7171c97af206f43bf9befae0f6872

    • SHA1

      4b226b024268ffac42d798f7a8720981bcbeff0c

    • SHA256

      90c4f4608856a5b760067e2e2deba0ebc7136e02c784661b0ea75c89f5ef435a

    • SHA512

      46ef6355d13a161a999cc8f54f62005b1e7ef42c986b43a2cdc7301c16e6c2001e8e27f520903e1978eb5753edfe5ffa774eeb5b642e7212681950cea4586ec2

    • SSDEEP

      1536:IbwXfBlWa6B0MwH7/uDLxNalmMb+KR0Nc8QsJq39:0iffCm74xIUe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks