Analysis
-
max time kernel
105s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11-09-2024 12:48
General
-
Target
da616403038228e82184f3c49d237faa_JaffaCakes118.exe
-
Size
72KB
-
MD5
da616403038228e82184f3c49d237faa
-
SHA1
a1dbef8bd59fae2f3f3866306f6994816d16fee3
-
SHA256
8b9ac9cd2fa539b6eb8be15791832668944dee4c3eecff60623a3911cc4a547d
-
SHA512
74c8752bfd1b624a6d3c256604285bd613fc8e48654edcce0c3935ba25f6754dcb0ccdb30a8854421c7edc63327a0a860fe24122c4b89369eb9d545f85f0d73e
-
SSDEEP
1536:IpWZSkcesia5VJq4OFJQUuAdh5Mb+KR0Nc8QsJq39:mJkyiaOhJhtDe0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.2.166:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\da616403038228e82184f3c49d237faa_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\da616403038228e82184f3c49d237faa_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB