General

  • Target

    dbfb781177e4a11e5d882abad6acc938_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240912-g8j1pswalj

  • MD5

    dbfb781177e4a11e5d882abad6acc938

  • SHA1

    c6e8be0c2a1109b097eb82b4950e2af96cabe4bd

  • SHA256

    bc87643e2a2dcca5dcc3bf64647c33c02c19df56d56539f9232b46f85c78aa37

  • SHA512

    7262b637047ec8ed5204efc66388063a010ee32cf578b47317e493fbf31312e485f0dd8c8a531374b94e0d5d8b116030ec9d8db9994d772672226e79ddd15398

  • SSDEEP

    24576:6E13gJnNiQQSA7Ph8NKvWGUWqPU5EDvLJPjraFLR5ROW:BWjrHKv3UTPjrkp7

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.0.2.15:1337

Targets

    • Target

      dbfb781177e4a11e5d882abad6acc938_JaffaCakes118

    • Size

      1.1MB

    • MD5

      dbfb781177e4a11e5d882abad6acc938

    • SHA1

      c6e8be0c2a1109b097eb82b4950e2af96cabe4bd

    • SHA256

      bc87643e2a2dcca5dcc3bf64647c33c02c19df56d56539f9232b46f85c78aa37

    • SHA512

      7262b637047ec8ed5204efc66388063a010ee32cf578b47317e493fbf31312e485f0dd8c8a531374b94e0d5d8b116030ec9d8db9994d772672226e79ddd15398

    • SSDEEP

      24576:6E13gJnNiQQSA7Ph8NKvWGUWqPU5EDvLJPjraFLR5ROW:BWjrHKv3UTPjrkp7

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks