General

  • Target

    d008ed4cca7ba1567ea20adf13d72d86_JaffaCakes118

  • Size

    72KB

  • Sample

    240906-vm1yzsycrd

  • MD5

    d008ed4cca7ba1567ea20adf13d72d86

  • SHA1

    ad261cfeaf055618f044aba3e98ce7ba00475902

  • SHA256

    5b48cf97a8a3279bda3af026c85d12c922fd1d2995b223327240fda84a1f9414

  • SHA512

    389bf5045f84417f2aa1db93733149bd1f1d60ef8a9bf008ded9c863b77e283ce7c7a992e8baa481616133fd6edfe00e5d63df614d36e8a40fd87183ea50beaf

  • SSDEEP

    1536:ItWt25ARS6+dq2HSRcxIjmvCICutw3vMb+KR0Nc8QsJq39:Bt41q2HYcxIjYXC4w3ve0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

130.79.237.45:10002

Targets

    • Target

      d008ed4cca7ba1567ea20adf13d72d86_JaffaCakes118

    • Size

      72KB

    • MD5

      d008ed4cca7ba1567ea20adf13d72d86

    • SHA1

      ad261cfeaf055618f044aba3e98ce7ba00475902

    • SHA256

      5b48cf97a8a3279bda3af026c85d12c922fd1d2995b223327240fda84a1f9414

    • SHA512

      389bf5045f84417f2aa1db93733149bd1f1d60ef8a9bf008ded9c863b77e283ce7c7a992e8baa481616133fd6edfe00e5d63df614d36e8a40fd87183ea50beaf

    • SSDEEP

      1536:ItWt25ARS6+dq2HSRcxIjmvCICutw3vMb+KR0Nc8QsJq39:Bt41q2HYcxIjYXC4w3ve0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks