General
-
Target
efe3ae1f1a79e72ef715d5f6b86725e5_JaffaCakes118
-
Size
512KB
-
Sample
240921-qnrz9athmg
-
MD5
efe3ae1f1a79e72ef715d5f6b86725e5
-
SHA1
756f01d7f3000e950fe9ea58424ed0a54fb9a819
-
SHA256
a541939b1086f9b5fe621ae455a80892c3f78307f3691f6253bf6f3cf6e3b4e0
-
SHA512
57043d8727929e0c5ab639d37c4b52aea99efb1017fec79952b5e3fb4c90eacc10446456d0a8e4245d79882a3d0af03254e1a9a9a45f99c1ee40c299dbb972b7
-
SSDEEP
12288:aROXJ3OAMsRcKWw4KM0Jisw3eq4APDKZIydB4fuShYzb3XRJU24J8/jNtKpJNnu8:aR+3TwG4eJLw3eq8z5Smb3BDrmpJpuGn
Static task
static1
Behavioral task
behavioral1
Sample
efe3ae1f1a79e72ef715d5f6b86725e5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efe3ae1f1a79e72ef715d5f6b86725e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Extracted
metasploit
windows/shell_reverse_tcp
192.168.1.4:4444
Targets
-
-
Target
efe3ae1f1a79e72ef715d5f6b86725e5_JaffaCakes118
-
Size
512KB
-
MD5
efe3ae1f1a79e72ef715d5f6b86725e5
-
SHA1
756f01d7f3000e950fe9ea58424ed0a54fb9a819
-
SHA256
a541939b1086f9b5fe621ae455a80892c3f78307f3691f6253bf6f3cf6e3b4e0
-
SHA512
57043d8727929e0c5ab639d37c4b52aea99efb1017fec79952b5e3fb4c90eacc10446456d0a8e4245d79882a3d0af03254e1a9a9a45f99c1ee40c299dbb972b7
-
SSDEEP
12288:aROXJ3OAMsRcKWw4KM0Jisw3eq4APDKZIydB4fuShYzb3XRJU24J8/jNtKpJNnu8:aR+3TwG4eJLw3eq8z5Smb3BDrmpJpuGn
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious use of SetThreadContext
-