Overview

overview

10

Static

static

3

e2920de9f6...18.exe

windows7-x64

1

e2920de9f6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2920de9f6e4094c158f7de3e6b80754_JaffaCakes118

  • Size

    857KB

  • Sample

    240915-qj4s9awdmk

  • MD5

    e2920de9f6e4094c158f7de3e6b80754

  • SHA1

    8efe304a57ce8dcf3453cdbc1f16e156464e671f

  • SHA256

    e0133e5690e3507c0c1f0dd62735faa9c2e83f848a6c9a4be97e24483178535c

  • SHA512

    172e9d42d34049d0f1d0129dda1ccd8847a535da29c487a0b794fe74359be435cf51fe96314861239b54064f57051419885005faa32b1d6736af377f8cc05e91

  • SSDEEP

    24576:c26BG+8KJebEOwZUY12snLomtfikEyHs:ZK8KJebEOSUYLD

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://206.189.160.37:80/zKER

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;NLNL)

Targets

    • Target

      e2920de9f6e4094c158f7de3e6b80754_JaffaCakes118

    • Size

      857KB

    • MD5

      e2920de9f6e4094c158f7de3e6b80754

    • SHA1

      8efe304a57ce8dcf3453cdbc1f16e156464e671f

    • SHA256

      e0133e5690e3507c0c1f0dd62735faa9c2e83f848a6c9a4be97e24483178535c

    • SHA512

      172e9d42d34049d0f1d0129dda1ccd8847a535da29c487a0b794fe74359be435cf51fe96314861239b54064f57051419885005faa32b1d6736af377f8cc05e91

    • SSDEEP

      24576:c26BG+8KJebEOwZUY12snLomtfikEyHs:ZK8KJebEOSUYLD

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks