General

  • Target

    e7173bdc0962f1118b703644e22c9163_JaffaCakes118

  • Size

    112KB

  • Sample

    240917-sg352szdkr

  • MD5

    e7173bdc0962f1118b703644e22c9163

  • SHA1

    4ec98d774f2ffbe69ff249568232e1e080a0e1fa

  • SHA256

    0b0507bb4e9e610d20107811fdcc28abdac455bf4a05364819ca624d85709f31

  • SHA512

    1160082eb63a574ffd8cb591c28982c91216be50e91a19f817a843f907d79e4dc63fba5979d85d57a073e9712632d8180965c783488a848bfad90a3351cd6e77

  • SSDEEP

    1536:oMQl32d4sYyYe/F6Myl5KD//eywloxsmRmyMBQzgoPvLV6eBsCXKc:oMQ0d4eB/zL/VwloxtRPMFoXL1BsC

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.13:4444

Targets

    • Target

      e7173bdc0962f1118b703644e22c9163_JaffaCakes118

    • Size

      112KB

    • MD5

      e7173bdc0962f1118b703644e22c9163

    • SHA1

      4ec98d774f2ffbe69ff249568232e1e080a0e1fa

    • SHA256

      0b0507bb4e9e610d20107811fdcc28abdac455bf4a05364819ca624d85709f31

    • SHA512

      1160082eb63a574ffd8cb591c28982c91216be50e91a19f817a843f907d79e4dc63fba5979d85d57a073e9712632d8180965c783488a848bfad90a3351cd6e77

    • SSDEEP

      1536:oMQl32d4sYyYe/F6Myl5KD//eywloxsmRmyMBQzgoPvLV6eBsCXKc:oMQ0d4eB/zL/VwloxtRPMFoXL1BsC

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks