Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-09-2024 22:53
General
-
Target
f703b465e10a9b38af6c83446af19e26_JaffaCakes118.exe
-
Size
72KB
-
MD5
f703b465e10a9b38af6c83446af19e26
-
SHA1
2bbc2ebbd541fbfdab11c1087a8838a16546d46e
-
SHA256
7fb34b7d81b2eef5a07062ed321d61553cfdf9796d220f35182a93f7fed26a3b
-
SHA512
af45130a3bf19befde0a0a60ea5f00531cfbdc8bc1041c9027d0b18869a5dc5fd8aedc062d370bd477ee38a6f7afbda9a52c32e589afc22de58ac7d978f6ced5
-
SSDEEP
1536:IC01BHADoaafKpg1OTlTlWMb+KR0Nc8QsJq39:P0koaasg1OTnWe0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/download_exec
C2
http://192.168.0.3:8443/INITM
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f703b465e10a9b38af6c83446af19e26_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f703b465e10a9b38af6c83446af19e26_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB