General

  • Target

    e37f939e4d67e3e462a82d6568842929_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240915-2jn9cawbrb

  • MD5

    e37f939e4d67e3e462a82d6568842929

  • SHA1

    51afe22ab414da7a1f2404266e7034a9f6b81070

  • SHA256

    0ce686ab3dfed475359bbde1e7a27eac16b22127a872e675bd27db35296236f0

  • SHA512

    79cbd697ee537ea2c98d8cc35e2032c42a5e48cffce45458cae20d93aa9ce65e813a0d287f3a9ac3f629a2e0d2e4c8a7ff50ed4cbb65c4e10f956778d100c0ab

  • SSDEEP

    24576:gVVJlBa5PFlkLzTVkoyLPq6rEIsWMGGOYBeTCjtn+maX4Lzfj:wVJlBa5dlGlyLPzrgGGOYBS0tnHaX4vL

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.28:4444

Targets

    • Target

      e37f939e4d67e3e462a82d6568842929_JaffaCakes118

    • Size

      1.7MB

    • MD5

      e37f939e4d67e3e462a82d6568842929

    • SHA1

      51afe22ab414da7a1f2404266e7034a9f6b81070

    • SHA256

      0ce686ab3dfed475359bbde1e7a27eac16b22127a872e675bd27db35296236f0

    • SHA512

      79cbd697ee537ea2c98d8cc35e2032c42a5e48cffce45458cae20d93aa9ce65e813a0d287f3a9ac3f629a2e0d2e4c8a7ff50ed4cbb65c4e10f956778d100c0ab

    • SSDEEP

      24576:gVVJlBa5PFlkLzTVkoyLPq6rEIsWMGGOYBeTCjtn+maX4Lzfj:wVJlBa5dlGlyLPzrgGGOYBS0tnHaX4vL

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks