General

  • Target

    f4fd8aaf3368f4062caafcd360937828_JaffaCakes118

  • Size

    249KB

  • Sample

    240925-c49ncazfqp

  • MD5

    f4fd8aaf3368f4062caafcd360937828

  • SHA1

    623f3e2ef410cc0bb7978af873c05601e6450e53

  • SHA256

    c6e7777d2db0ce620c35d2ec5b69c24b33a0cc068e7f83e2b0f8a456540a4ee0

  • SHA512

    68a6d3adb91801809cb467e59e85fb7e8b7d9a5b793bbeff43860b55e36f084054da5ac0e979b249ab60f2eb252b434020dbf6cd2b64a49e9ad1d1b7699dde5e

  • SSDEEP

    6144:HUrCoH5Iy5FLnYNhilwoz52qPQo0vf2sIJ+G:CHZjxChilBz52bvf++G

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.56.1:31337

Targets

    • Target

      f4fd8aaf3368f4062caafcd360937828_JaffaCakes118

    • Size

      249KB

    • MD5

      f4fd8aaf3368f4062caafcd360937828

    • SHA1

      623f3e2ef410cc0bb7978af873c05601e6450e53

    • SHA256

      c6e7777d2db0ce620c35d2ec5b69c24b33a0cc068e7f83e2b0f8a456540a4ee0

    • SHA512

      68a6d3adb91801809cb467e59e85fb7e8b7d9a5b793bbeff43860b55e36f084054da5ac0e979b249ab60f2eb252b434020dbf6cd2b64a49e9ad1d1b7699dde5e

    • SSDEEP

      6144:HUrCoH5Iy5FLnYNhilwoz52qPQo0vf2sIJ+G:CHZjxChilBz52bvf++G

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks