Overview

overview

10

Static

static

1

dc92098fed...118.js

windows7-x64

10

dc92098fed...118.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc92098fed3f3bd811855c23d7590259_JaffaCakes118

  • Size

    19KB

  • Sample

    240912-thbmvssgmm

  • MD5

    dc92098fed3f3bd811855c23d7590259

  • SHA1

    91e47896c6e48bc49173ae16fcb5e7d00f4aa91b

  • SHA256

    9471fe7cdfa2a3bdb4e6cb98b1a54ffa45c059db47a4b3b0875b04f9fb967652

  • SHA512

    2964adb2b05eaaa0ab114e749b24da3123b662a163072bedee8462d6466c65eda46fe8f8327ca66f7cde9cc9f1820ab99f0c8328b2d3cecfef63b51e5917809f

  • SSDEEP

    384:cAyFOFwVfmTQ86AHpFh0h4xdeD3Ie9X760vFbQUK3XnE/4ZrKG72WEg:cT8F3TQZAHFa4xU3VLaHtZrKG7BEg

Score
10/10
metasploitbackdoorexecutiontrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://azurlink.net:443/tempur-pedic/tempur-ergo-adjustable-base/mfi134086.html

Targets

    • Target

      dc92098fed3f3bd811855c23d7590259_JaffaCakes118

    • Size

      19KB

    • MD5

      dc92098fed3f3bd811855c23d7590259

    • SHA1

      91e47896c6e48bc49173ae16fcb5e7d00f4aa91b

    • SHA256

      9471fe7cdfa2a3bdb4e6cb98b1a54ffa45c059db47a4b3b0875b04f9fb967652

    • SHA512

      2964adb2b05eaaa0ab114e749b24da3123b662a163072bedee8462d6466c65eda46fe8f8327ca66f7cde9cc9f1820ab99f0c8328b2d3cecfef63b51e5917809f

    • SSDEEP

      384:cAyFOFwVfmTQ86AHpFh0h4xdeD3Ie9X760vFbQUK3XnE/4ZrKG72WEg:cT8F3TQZAHFa4xU3VLaHtZrKG7BEg

    Score
    10/10
    metasploitbackdoorexecutiontrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks