Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
07-09-2024 03:28
General
-
Target
d0facd5814bc5aa2377ce3a6e89e1b57_JaffaCakes118.exe
-
Size
72KB
-
MD5
d0facd5814bc5aa2377ce3a6e89e1b57
-
SHA1
22c5ef58dc50eb3d7a8acb54a2338538e75a2c60
-
SHA256
425a99302589af031f7584c2c5bfc2472aa8c4fc74099f890dfd348c5514d5c9
-
SHA512
2d4d32d772b6aa63a07f8a2ef7772bccc13a71a43fc5628d8aa664f2b4c715ca4350a3632c0bfeab8a1cbf6afb6c61b6a11dccccbbcd3c1d75fe0604e776919a
-
SSDEEP
1536:IVSjUFF3c3k7CyM7nbibCq7wMb+KR0Nc8QsJq39:mSYr3ISCyM7bibCbe0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
78.119.63.230:81
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d0facd5814bc5aa2377ce3a6e89e1b57_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d0facd5814bc5aa2377ce3a6e89e1b57_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB