Resubmissions

15-09-2024 19:03

240915-xql1cayare 10

15-09-2024 19:00

240915-xnvvgaydpn 10

General

  • Target

    e32ee58b95c86d40cbdd85fdd0afe338_JaffaCakes118

  • Size

    112KB

  • Sample

    240915-xql1cayare

  • MD5

    e32ee58b95c86d40cbdd85fdd0afe338

  • SHA1

    8fdab079b750c040ff388a893e89edceb1041b34

  • SHA256

    9ca1a34fd635469a42460ac6de271bf9dbc2cb3b96cf9cb74ea3549a46283bf4

  • SHA512

    1c9b512a4b3948dc3593c30ef45377f3b934fb4b246e84a60a06b1172adec26d44ba07f10a1c11d82f5ecaa4cb68f160506af83b3d647bdadd87e84ba4fff72d

  • SSDEEP

    1536:vUKJmixskGcoGMcJ0y7FAnIgIqYWjQi3HWIjdsmsVOboPvLV6eBsCXKc:vUniGl380y7e+qYiDkooXL1BsC

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

127.0.0.1:4444

Targets

    • Target

      e32ee58b95c86d40cbdd85fdd0afe338_JaffaCakes118

    • Size

      112KB

    • MD5

      e32ee58b95c86d40cbdd85fdd0afe338

    • SHA1

      8fdab079b750c040ff388a893e89edceb1041b34

    • SHA256

      9ca1a34fd635469a42460ac6de271bf9dbc2cb3b96cf9cb74ea3549a46283bf4

    • SHA512

      1c9b512a4b3948dc3593c30ef45377f3b934fb4b246e84a60a06b1172adec26d44ba07f10a1c11d82f5ecaa4cb68f160506af83b3d647bdadd87e84ba4fff72d

    • SSDEEP

      1536:vUKJmixskGcoGMcJ0y7FAnIgIqYWjQi3HWIjdsmsVOboPvLV6eBsCXKc:vUniGl380y7e+qYiDkooXL1BsC

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks