General
-
Target
e156e62f13d812ddf067d81ea81fb033_JaffaCakes118
-
Size
46KB
-
Sample
240915-armlyawakn
-
MD5
e156e62f13d812ddf067d81ea81fb033
-
SHA1
aa3a709bc1df347a0efb8f63a2ddb000fd99ca60
-
SHA256
aad8cd1f1079d42221c922d1a82fc918b5b55040bab4ccccf1c488fc95b31b89
-
SHA512
1e46fe8df918b84a48bfd5483c65eb760e1dc89d02f02c5b2be2328c2ffecb4d7af9f8e2689dd8e2567fc7f6b7871b84ed8b538e364f7b8bbf716d81e6eca489
-
SSDEEP
768:IxBG1/WGZkEG+AcHChOgvSYyLN67s27mR8AQYrmph8A9nOWG1o9sq3:IxBG1/WQ/G+AGYOgOpSA8AfmbcWG3q3
Static task
static1
Behavioral task
behavioral1
Sample
e156e62f13d812ddf067d81ea81fb033_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e156e62f13d812ddf067d81ea81fb033_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Extracted
metasploit
windows/shell_reverse_tcp
192.168.1.72:4444
Targets
-
-
Target
e156e62f13d812ddf067d81ea81fb033_JaffaCakes118
-
Size
46KB
-
MD5
e156e62f13d812ddf067d81ea81fb033
-
SHA1
aa3a709bc1df347a0efb8f63a2ddb000fd99ca60
-
SHA256
aad8cd1f1079d42221c922d1a82fc918b5b55040bab4ccccf1c488fc95b31b89
-
SHA512
1e46fe8df918b84a48bfd5483c65eb760e1dc89d02f02c5b2be2328c2ffecb4d7af9f8e2689dd8e2567fc7f6b7871b84ed8b538e364f7b8bbf716d81e6eca489
-
SSDEEP
768:IxBG1/WGZkEG+AcHChOgvSYyLN67s27mR8AQYrmph8A9nOWG1o9sq3:IxBG1/WQ/G+AGYOgOpSA8AfmbcWG3q3
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-