Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
11-09-2024 02:26
General
-
Target
d97488bf1862a1a2643f87831689b374_JaffaCakes118.exe
-
Size
4KB
-
MD5
d97488bf1862a1a2643f87831689b374
-
SHA1
5a263df57da17cd1a507f4a149ac5b5ca9a2facc
-
SHA256
de74e218f9c70c275923746112a672cf6ac9438083eb0b55afbc79645462364f
-
SHA512
1f66a83e495f2e0fef8ed6482fb6039d60eaa6987ffa960ccd2a773815e9b51838064c2ea20cacdbdf6f8ff7c36482c5059a35564161281444e4e77a2a97598d
-
SSDEEP
48:6piY7Pb59wWhxNC48aVjViTfmiFZjSzXNWWqHu/iq1lxrRP9W25frpOBBQ:wzteWhSVaV4FJSds+XftPI2FYLQ
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.4.25:31337
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d97488bf1862a1a2643f87831689b374_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d97488bf1862a1a2643f87831689b374_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
-
Filesize
16KB