Analysis
-
max time kernel
105s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
16-09-2024 11:30
General
-
Target
e4ad252f606f4b7d8187aa771ebc2541_JaffaCakes118.exe
-
Size
21KB
-
MD5
e4ad252f606f4b7d8187aa771ebc2541
-
SHA1
1798e4c6b335dcf4cbd0936303f74f3387c3a931
-
SHA256
780cd4c4199a4f1a99456ca7ce1d9516f6e75072a10d670ec7b45ddac79eea9f
-
SHA512
2934fd4a0619fc66b2b7e6527416bd2d1afd16cc0950bbd159491d95d9557eebe3819f7325f5990657578149db8036d76892fb85246b8847f547e98ee1b678db
-
SSDEEP
384:OzP4Fay9JAQuE4t1cIAxbE9lY4a0kHhU2iaNRKUUw3X:fay9JAq4IiaNR2
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
46.248.196.0:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e4ad252f606f4b7d8187aa771ebc2541_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e4ad252f606f4b7d8187aa771ebc2541_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB