Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
23-09-2024 18:34
General
-
Target
f2e1357984739e82ea1a4339e1044689_JaffaCakes118.exe
-
Size
76KB
-
MD5
f2e1357984739e82ea1a4339e1044689
-
SHA1
d0219b00e8895307d938635d8f063b7454c80e7f
-
SHA256
df1fb66e66dfd6a686f918bc6a43eb742190eca975e9993106824140a56577bf
-
SHA512
8c27040de47112f9daaa7d9b564bd7709f6bb98af46dc0db1192163213ea852f077c5b1c995c8d5ce548b5c5244f2dbe42b9cbad392792cbc15945d38e671073
-
SSDEEP
1536:rZ7WKsy/sYvUJsA5ZFQIWqOsUu7HFCXs3Cr621X+m4g:rZ7WKsfD5ZeIWqOs57llCr628m
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/call4_dword_xor
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2e1357984739e82ea1a4339e1044689_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f2e1357984739e82ea1a4339e1044689_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
-
Filesize
448KB
-
Filesize
84KB