General

  • Target

    f58d469f3a5b86a45287338858bdda4e_JaffaCakes118

  • Size

    72KB

  • Sample

    240925-jwg2patgjk

  • MD5

    f58d469f3a5b86a45287338858bdda4e

  • SHA1

    4748e0531d501c39ed48c67cd9bfbfe4a92b7edb

  • SHA256

    451359e3b0ff72ebdc5f10fcfc9b722cf88baa448f87628b4cc3c0404200dbda

  • SHA512

    ff4da561c144e594a3c19cecc7d29b61915ed3919a61c22bc47e804e4b7122c51305b507bd2a0c5dcc57d440de4450036ce4e72dd71f01776d7ff48317dafe91

  • SSDEEP

    1536:IyaXSuWLk1YM1yzuBumSIAAbMhMb+KR0Nc8QsJq39:IX2w1nPu+Ge0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.31.143:8888

Targets

    • Target

      f58d469f3a5b86a45287338858bdda4e_JaffaCakes118

    • Size

      72KB

    • MD5

      f58d469f3a5b86a45287338858bdda4e

    • SHA1

      4748e0531d501c39ed48c67cd9bfbfe4a92b7edb

    • SHA256

      451359e3b0ff72ebdc5f10fcfc9b722cf88baa448f87628b4cc3c0404200dbda

    • SHA512

      ff4da561c144e594a3c19cecc7d29b61915ed3919a61c22bc47e804e4b7122c51305b507bd2a0c5dcc57d440de4450036ce4e72dd71f01776d7ff48317dafe91

    • SSDEEP

      1536:IyaXSuWLk1YM1yzuBumSIAAbMhMb+KR0Nc8QsJq39:IX2w1nPu+Ge0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks