General

  • Target

    e79c3bed02752c36bba603119884e640_JaffaCakes118

  • Size

    72KB

  • Sample

    240917-yvl2kssdkf

  • MD5

    e79c3bed02752c36bba603119884e640

  • SHA1

    bb2be28888974d504caec04ba1056e9562596341

  • SHA256

    4a2785fee0331479b225af581178537354ddea0c752b5a017e97625b8e9e4926

  • SHA512

    d6c868bdcbabeb328e171f4e07c4d77da5b8543338e7b18c3db0f3c236de45f3aa62dfdc10c58a4e3ef0704572b267d54cd9af85f854e340956f0c0ac210ecd5

  • SSDEEP

    1536:IEQ0M58L+RauWLZTDZc1TvAuKMb+KR0Nc8QsJq39:I06lox8D1Ke0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

89.134.163.236:18003

Targets

    • Target

      e79c3bed02752c36bba603119884e640_JaffaCakes118

    • Size

      72KB

    • MD5

      e79c3bed02752c36bba603119884e640

    • SHA1

      bb2be28888974d504caec04ba1056e9562596341

    • SHA256

      4a2785fee0331479b225af581178537354ddea0c752b5a017e97625b8e9e4926

    • SHA512

      d6c868bdcbabeb328e171f4e07c4d77da5b8543338e7b18c3db0f3c236de45f3aa62dfdc10c58a4e3ef0704572b267d54cd9af85f854e340956f0c0ac210ecd5

    • SSDEEP

      1536:IEQ0M58L+RauWLZTDZc1TvAuKMb+KR0Nc8QsJq39:I06lox8D1Ke0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks