General

  • Target

    e156e62f13d812ddf067d81ea81fb033_JaffaCakes118

  • Size

    46KB

  • Sample

    240915-armlyawakn

  • MD5

    e156e62f13d812ddf067d81ea81fb033

  • SHA1

    aa3a709bc1df347a0efb8f63a2ddb000fd99ca60

  • SHA256

    aad8cd1f1079d42221c922d1a82fc918b5b55040bab4ccccf1c488fc95b31b89

  • SHA512

    1e46fe8df918b84a48bfd5483c65eb760e1dc89d02f02c5b2be2328c2ffecb4d7af9f8e2689dd8e2567fc7f6b7871b84ed8b538e364f7b8bbf716d81e6eca489

  • SSDEEP

    768:IxBG1/WGZkEG+AcHChOgvSYyLN67s27mR8AQYrmph8A9nOWG1o9sq3:IxBG1/WQ/G+AGYOgOpSA8AfmbcWG3q3

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.72:4444

Targets

    • Target

      e156e62f13d812ddf067d81ea81fb033_JaffaCakes118

    • Size

      46KB

    • MD5

      e156e62f13d812ddf067d81ea81fb033

    • SHA1

      aa3a709bc1df347a0efb8f63a2ddb000fd99ca60

    • SHA256

      aad8cd1f1079d42221c922d1a82fc918b5b55040bab4ccccf1c488fc95b31b89

    • SHA512

      1e46fe8df918b84a48bfd5483c65eb760e1dc89d02f02c5b2be2328c2ffecb4d7af9f8e2689dd8e2567fc7f6b7871b84ed8b538e364f7b8bbf716d81e6eca489

    • SSDEEP

      768:IxBG1/WGZkEG+AcHChOgvSYyLN67s27mR8AQYrmph8A9nOWG1o9sq3:IxBG1/WQ/G+AGYOgOpSA8AfmbcWG3q3

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks