Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17-09-2024 22:42
General
-
Target
e7d6b118f66993bcfc6f359fade7fcc9_JaffaCakes118.exe
-
Size
112KB
-
MD5
e7d6b118f66993bcfc6f359fade7fcc9
-
SHA1
3c0bdf05abffde9b5f58091981bc0f857ab8df09
-
SHA256
680ca6c5f015478317aa522a8106539cf4ca1e6d79432f86b4520273f792290c
-
SHA512
2736875564346e7bc18e849a5f09714023a7c305c2c24b7c5b9d449cdcf18678c97e9cca9f7c2688b7e5a01ce868aad119fe64688ea6b454f7bd23477a2e238d
-
SSDEEP
3072:+tsi2QMscc/JO9nb8SGX0lRBOoX7BsCRyV:+CYMNc/U9nbCmRUoBRs
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.18.229:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e7d6b118f66993bcfc6f359fade7fcc9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e7d6b118f66993bcfc6f359fade7fcc9_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB