General

  • Target

    ac0911fea6ddb15fc071cca432e118c2_JaffaCakes118

  • Size

    94KB

  • Sample

    240819-wql5nsscpp

  • MD5

    ac0911fea6ddb15fc071cca432e118c2

  • SHA1

    9e5cc1b7719a1dac19d094c8a198c4a1a5a73190

  • SHA256

    4104d5250b7d38eb49981644fb0210d9ff69d50ba6cd1a523667098a80dac7f7

  • SHA512

    f76e70198708a033df78f5d66b64ad31364e06f7507bdcde8f7a453c647941ab3f48504c64052e0e668aef47ea96c98371aed44832f6b54b8ebaeea7b1458a0e

  • SSDEEP

    1536:I4T46E3VoAenFxBxBWh6u5tDGMb+KR0Nc8QstTRq3:LmAFxBxEJGe0Nc8Qstm

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.200.130:4444

Targets

    • Target

      ac0911fea6ddb15fc071cca432e118c2_JaffaCakes118

    • Size

      94KB

    • MD5

      ac0911fea6ddb15fc071cca432e118c2

    • SHA1

      9e5cc1b7719a1dac19d094c8a198c4a1a5a73190

    • SHA256

      4104d5250b7d38eb49981644fb0210d9ff69d50ba6cd1a523667098a80dac7f7

    • SHA512

      f76e70198708a033df78f5d66b64ad31364e06f7507bdcde8f7a453c647941ab3f48504c64052e0e668aef47ea96c98371aed44832f6b54b8ebaeea7b1458a0e

    • SSDEEP

      1536:I4T46E3VoAenFxBxBWh6u5tDGMb+KR0Nc8QstTRq3:LmAFxBxEJGe0Nc8Qstm

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks