General

  • Target

    d430beb236443a3ea7090dde7df28a61_JaffaCakes118

  • Size

    72KB

  • Sample

    240908-myyc8svaqb

  • MD5

    d430beb236443a3ea7090dde7df28a61

  • SHA1

    ccf07f73c54894183cca710f0be1f55c6ed59135

  • SHA256

    97f513882b2bbe500813a2fe806f6d1138809958e2604b7a21a3d60f45575163

  • SHA512

    63652edc53729bde1a5c5f21c56f6958285873c8d0982abbf2cf826c2778da4f84eb01b11317cf3e19d21ea40f13720b09b96c41a2249fbc829fbec0224cf87c

  • SSDEEP

    1536:IZGVJoIn8Xl15CDsEEk/VNGRE3uhaMb+KR0Nc8QsJq39:nVJoInOlS3mRE3uUe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

217.23.38.19:4444

Targets

    • Target

      d430beb236443a3ea7090dde7df28a61_JaffaCakes118

    • Size

      72KB

    • MD5

      d430beb236443a3ea7090dde7df28a61

    • SHA1

      ccf07f73c54894183cca710f0be1f55c6ed59135

    • SHA256

      97f513882b2bbe500813a2fe806f6d1138809958e2604b7a21a3d60f45575163

    • SHA512

      63652edc53729bde1a5c5f21c56f6958285873c8d0982abbf2cf826c2778da4f84eb01b11317cf3e19d21ea40f13720b09b96c41a2249fbc829fbec0224cf87c

    • SSDEEP

      1536:IZGVJoIn8Xl15CDsEEk/VNGRE3uhaMb+KR0Nc8QsJq39:nVJoInOlS3mRE3uUe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks