Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
20-09-2024 12:10
General
-
Target
ed8e79421ee7059ea905eb441d8a5465_JaffaCakes118.exe
-
Size
217KB
-
MD5
ed8e79421ee7059ea905eb441d8a5465
-
SHA1
1772641cd5674aadcbaaa8e2ffd0c0bbcc06c616
-
SHA256
db60396a65fbb8bba29a47e4a1ab2fed7f1497ee026b2105191a6a24a23fb589
-
SHA512
13ae7b457615a309f84b04a89e257d3e692ef7c9ba58b0bb09a52e760a1e89df46a8eac5eaa6d9f1293373da130f727b535bfcaf0ae59450d9f7e3d85edc0b46
-
SSDEEP
6144:F21TBSSXtUqHac4t88AN292JvUZ8+GulcA9EcLFv:EBSSXtUr388bxZrGwcWv1
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ed8e79421ee7059ea905eb441d8a5465_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ed8e79421ee7059ea905eb441d8a5465_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
332KB
-
Filesize
4KB
-
Filesize
332KB