General

  • Target

    e6f32c85b4ebe317231ed0653ac1e232_JaffaCakes118

  • Size

    288KB

  • Sample

    240917-q1zwmawbjf

  • MD5

    e6f32c85b4ebe317231ed0653ac1e232

  • SHA1

    d34d77f44b591769ffe11538c5f381fced8079d9

  • SHA256

    c23cc3d1c48964363b1d08bb25e73f04343805a54096dc0721d54244e84a5d1c

  • SHA512

    e42e4cee972a6aa858dbb5820e2e662d66441b4a26bcf010fa753fe46e644b64f60113cb28261cc6fc81a464a07854039ceb807fa50d434c241d779395149e63

  • SSDEEP

    6144:8GWKtW8EAFg7hegv8Bf2r0hANVNM3mTy67cK:8GNDTFg7omqfDGVNKoy6

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.4:31337

Targets

    • Target

      e6f32c85b4ebe317231ed0653ac1e232_JaffaCakes118

    • Size

      288KB

    • MD5

      e6f32c85b4ebe317231ed0653ac1e232

    • SHA1

      d34d77f44b591769ffe11538c5f381fced8079d9

    • SHA256

      c23cc3d1c48964363b1d08bb25e73f04343805a54096dc0721d54244e84a5d1c

    • SHA512

      e42e4cee972a6aa858dbb5820e2e662d66441b4a26bcf010fa753fe46e644b64f60113cb28261cc6fc81a464a07854039ceb807fa50d434c241d779395149e63

    • SSDEEP

      6144:8GWKtW8EAFg7hegv8Bf2r0hANVNM3mTy67cK:8GNDTFg7omqfDGVNKoy6

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks