General

  • Target

    ea7b2c8cdf828a451a1b706fc04bcbbf_JaffaCakes118

  • Size

    72KB

  • Sample

    240919-drj3laybqp

  • MD5

    ea7b2c8cdf828a451a1b706fc04bcbbf

  • SHA1

    926c35d6375d2b6ba8d5ba0f53f537bc2c24febd

  • SHA256

    f68b948786a32ea75c758b03c251ae4716b08e985409ca11e7a8d3bf8f4bb2a6

  • SHA512

    4d93d92ca2a4b0d519431d1615465e97443f4c02ba5f2255aacf335f11c76c6c0ca546647a37f38b3e78b5060e6719d9e50bca86172d96d813b82ad52253fdf7

  • SSDEEP

    1536:Im3gtOnWD6r4ASXZCcPZbja/+jZJNGhIAfquMb+KR0Nc8QsJq39:b3pn3rV0ocPZbu+jvNv7ue0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.10.2:62100

Targets

    • Target

      ea7b2c8cdf828a451a1b706fc04bcbbf_JaffaCakes118

    • Size

      72KB

    • MD5

      ea7b2c8cdf828a451a1b706fc04bcbbf

    • SHA1

      926c35d6375d2b6ba8d5ba0f53f537bc2c24febd

    • SHA256

      f68b948786a32ea75c758b03c251ae4716b08e985409ca11e7a8d3bf8f4bb2a6

    • SHA512

      4d93d92ca2a4b0d519431d1615465e97443f4c02ba5f2255aacf335f11c76c6c0ca546647a37f38b3e78b5060e6719d9e50bca86172d96d813b82ad52253fdf7

    • SSDEEP

      1536:Im3gtOnWD6r4ASXZCcPZbja/+jZJNGhIAfquMb+KR0Nc8QsJq39:b3pn3rV0ocPZbu+jvNv7ue0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks