General

  • Target

    f045761319f856524a543ecd7f0e1014_JaffaCakes118

  • Size

    72KB

  • Sample

    240921-vsblaatgln

  • MD5

    f045761319f856524a543ecd7f0e1014

  • SHA1

    66283ab58f3b6c13df0af19a4babf14e4bd34772

  • SHA256

    b6e9eed8990dd61f11b2b6427d7f1d0527b9ec5417e2f96390b6b9fea8a7c472

  • SHA512

    fec16bb153460cd0e334263fc4f7116572baf44d49febbbfb547cb030f4c9f0e41e726f52fdf807892d757f6c0d114557f1776d6d61c7c5dad14986239578d75

  • SSDEEP

    1536:I2WA2g6lvkXy/UHw8O6qaKTdfbd/QYk8T0JtMb+KR0Nc8QsJq39:vR4vkX3Hu60RDd/O7Jte0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

46.230.99.212:4444

Targets

    • Target

      f045761319f856524a543ecd7f0e1014_JaffaCakes118

    • Size

      72KB

    • MD5

      f045761319f856524a543ecd7f0e1014

    • SHA1

      66283ab58f3b6c13df0af19a4babf14e4bd34772

    • SHA256

      b6e9eed8990dd61f11b2b6427d7f1d0527b9ec5417e2f96390b6b9fea8a7c472

    • SHA512

      fec16bb153460cd0e334263fc4f7116572baf44d49febbbfb547cb030f4c9f0e41e726f52fdf807892d757f6c0d114557f1776d6d61c7c5dad14986239578d75

    • SSDEEP

      1536:I2WA2g6lvkXy/UHw8O6qaKTdfbd/QYk8T0JtMb+KR0Nc8QsJq39:vR4vkX3Hu60RDd/O7Jte0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks