Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
15-09-2024 00:26
General
-
Target
e156e62f13d812ddf067d81ea81fb033_JaffaCakes118.exe
-
Size
46KB
-
MD5
e156e62f13d812ddf067d81ea81fb033
-
SHA1
aa3a709bc1df347a0efb8f63a2ddb000fd99ca60
-
SHA256
aad8cd1f1079d42221c922d1a82fc918b5b55040bab4ccccf1c488fc95b31b89
-
SHA512
1e46fe8df918b84a48bfd5483c65eb760e1dc89d02f02c5b2be2328c2ffecb4d7af9f8e2689dd8e2567fc7f6b7871b84ed8b538e364f7b8bbf716d81e6eca489
-
SSDEEP
768:IxBG1/WGZkEG+AcHChOgvSYyLN67s27mR8AQYrmph8A9nOWG1o9sq3:IxBG1/WQ/G+AGYOgOpSA8AfmbcWG3q3
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.1.72:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e156e62f13d812ddf067d81ea81fb033_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e156e62f13d812ddf067d81ea81fb033_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
100KB
-
Filesize
4KB
-
Filesize
100KB