Analysis
-
max time kernel
123s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
22-09-2024 08:16
General
-
Target
f1a1aa4b4a586c65108d037b7d45edb8_JaffaCakes118.exe
-
Size
72KB
-
MD5
f1a1aa4b4a586c65108d037b7d45edb8
-
SHA1
53b117a5365c79b65ceec87cf790aac1329dc95d
-
SHA256
c9f92db0402ddbb4db527d63792b6058d9468881a4a4d50b5e2b799512cc9cb3
-
SHA512
5c1aeed7719488d70905fcec6f8c13a2448c4183ddb5fc4b08aa44b679a32b9f511a07981c8f666c368377105140a3185a6a22da2e95fe386f1f96ef929e98ca
-
SSDEEP
1536:IZyxgfjajv81r96J/NBW+49Zdqod3Mb+KR0Nc8QsJq39:e+jv8+/b8ZdRd3e0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
92.48.121.145:2030
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f1a1aa4b4a586c65108d037b7d45edb8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f1a1aa4b4a586c65108d037b7d45edb8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB