General

  • Target

    f1517d1738c5eeb81ab5ee543162297a_JaffaCakes118

  • Size

    72KB

  • Sample

    240922-fjg95ssgnd

  • MD5

    f1517d1738c5eeb81ab5ee543162297a

  • SHA1

    c52143b7ac85b918ca84a41233c6ab51f7193eff

  • SHA256

    32f81b203997083f29cca0fdf4a01998e212a81117503f4b807ace51dd1c6411

  • SHA512

    a3187535edd9b0a9653c05363c834141fa0abfa77f5247a1c28420f9229893fa4ad70caca1f189774c383fe08cb4aa9650415e99a70a770d49b79ecf01b1a40b

  • SSDEEP

    1536:ILl21IfP+Ps2sKFhiDWy+k8C/8wVMb+KR0Nc8QsJq39:pIH+PJ72J+k8C02e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

138.68.161.104:443

Targets

    • Target

      f1517d1738c5eeb81ab5ee543162297a_JaffaCakes118

    • Size

      72KB

    • MD5

      f1517d1738c5eeb81ab5ee543162297a

    • SHA1

      c52143b7ac85b918ca84a41233c6ab51f7193eff

    • SHA256

      32f81b203997083f29cca0fdf4a01998e212a81117503f4b807ace51dd1c6411

    • SHA512

      a3187535edd9b0a9653c05363c834141fa0abfa77f5247a1c28420f9229893fa4ad70caca1f189774c383fe08cb4aa9650415e99a70a770d49b79ecf01b1a40b

    • SSDEEP

      1536:ILl21IfP+Ps2sKFhiDWy+k8C/8wVMb+KR0Nc8QsJq39:pIH+PJ72J+k8C02e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks