Analysis
-
max time kernel
126s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21-09-2024 03:11
General
-
Target
eef6eeac676b521fa0a62d8492f7fb3d_JaffaCakes118.exe
-
Size
37KB
-
MD5
eef6eeac676b521fa0a62d8492f7fb3d
-
SHA1
7d800a54ebc6d55a3a8fd60463b5a11bf2a5003e
-
SHA256
4064c84b5cb89fc00ab87db848d86d4c8ae2964a11bf04cde5e8f58c07807b48
-
SHA512
a544044f3ad5bc18b37e80a79b81dcf83cec614a2f327dbab9ba3631b5027ddc4eb050bfeb5bd6cacd5a9e44f2713a3465dcf3363b4be0350c1f765abec0d7c3
-
SSDEEP
768:eVATSM5622gifIqNRO7Ay+qAbNPMSNWT6lRZ95x:IV6+mkBbhPM0ph5x
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.131.131:4321
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\eef6eeac676b521fa0a62d8492f7fb3d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eef6eeac676b521fa0a62d8492f7fb3d_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB