Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
23-09-2024 17:15
General
-
Target
f2bf9e68d9e96173c560ff0536bcdcf7_JaffaCakes118.exe
-
Size
72KB
-
MD5
f2bf9e68d9e96173c560ff0536bcdcf7
-
SHA1
dead74ac77c396ae2265878a2d7306250c838cb0
-
SHA256
fc192124bdeceaf8691ab7be326093cba5591008e122ced9befd3a15a405a8e9
-
SHA512
f437184efaad629c702de4d88e1c8510e013399a1a65cd56d7ae0cb77bc42728393b2796243b3fccd1bd59e1b7d95a9bd415a124d476811d57dc24dd69ff1f91
-
SSDEEP
1536:I/VVq/0HY4aF2XqYrqnf75rgLUR0UP3CazCMb+KR0Nc8QsJq39:sVNHXPqnfV5Cre0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/download_exec
C2
http://51.68.120.61:80/pers.exe
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2bf9e68d9e96173c560ff0536bcdcf7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f2bf9e68d9e96173c560ff0536bcdcf7_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB