General

  • Target

    e92a1ea43fca2f7073281ce0cc8eceb6_JaffaCakes118

  • Size

    72KB

  • Sample

    240918-p5n49a1gqd

  • MD5

    e92a1ea43fca2f7073281ce0cc8eceb6

  • SHA1

    03778204d54b5524b9f5b1b9431a91e5788cb899

  • SHA256

    fb10a0aa828560f6ac492e3d26791a4cc68fa9635074ebec0377d0c4f0d27938

  • SHA512

    63ada191ec835d61b748600843e6d238db23a78594950e3bc01b4b52a38e450955b77899a2b807f8374f67e9c023cf755d0ec47aeb277f8ea37f6f615df3d79f

  • SSDEEP

    1536:IrjWq8vFFIo4AslgpsUjCojAK/8HHl1HmydMb+KR0Nc8QsJq39:gjHGFFe6+EhAU8nl1Hvde0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.25.43.36:1929

Targets

    • Target

      e92a1ea43fca2f7073281ce0cc8eceb6_JaffaCakes118

    • Size

      72KB

    • MD5

      e92a1ea43fca2f7073281ce0cc8eceb6

    • SHA1

      03778204d54b5524b9f5b1b9431a91e5788cb899

    • SHA256

      fb10a0aa828560f6ac492e3d26791a4cc68fa9635074ebec0377d0c4f0d27938

    • SHA512

      63ada191ec835d61b748600843e6d238db23a78594950e3bc01b4b52a38e450955b77899a2b807f8374f67e9c023cf755d0ec47aeb277f8ea37f6f615df3d79f

    • SSDEEP

      1536:IrjWq8vFFIo4AslgpsUjCojAK/8HHl1HmydMb+KR0Nc8QsJq39:gjHGFFe6+EhAU8nl1Hvde0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks