Analysis
-
max time kernel
105s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
24/08/2024, 18:01
General
-
Target
bf29d4e2bb9afcb220b9806ae0936ace_JaffaCakes118.exe
-
Size
37KB
-
MD5
bf29d4e2bb9afcb220b9806ae0936ace
-
SHA1
1aeaa90951733f918cca7ff70fa292e448110744
-
SHA256
09b450e042a6b175948bdbea4aae7e42af0ed7ab5d5e1af956c7641c687ee2c3
-
SHA512
f587b843a7a7739288ab0ffa902c235df5c1a70df2f37655daf59fa6f34e93e52b13aca77ad9459dda9957529620110623d174fbb7d27203c317f619f0efaf4a
-
SSDEEP
768:gtA5SMQa2BZuE1UIjOSNO7yX9qugN1kPKp+6lRZ95x:Knn9ZwVz2t5C1kCjh5x
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
197.0.148.179:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bf29d4e2bb9afcb220b9806ae0936ace_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\bf29d4e2bb9afcb220b9806ae0936ace_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB