General

  • Target

    f5bd3f5d163b58fefd08d4a3ed49f1b2_JaffaCakes118

  • Size

    72KB

  • Sample

    240925-ltdmla1hra

  • MD5

    f5bd3f5d163b58fefd08d4a3ed49f1b2

  • SHA1

    83a6b126781a68871b068d92bc7b9e82a504ebb9

  • SHA256

    90d46918ac83f5d21a183cfd42c83c2ea7adb7904f1e171f1e143e252a34bb26

  • SHA512

    bb639bddb1dfb195f1ce1a9a55ab4672335d993a13bc25b40e9d38d4c72891a7745b69e6c4712dbcba2e072068d17aaa284e9bdb5f659d0fa3c20a079d658243

  • SSDEEP

    1536:I68onDLYO9fgwr8+AFjFuorOHy6cyhUtN0QMb+KR0Nc8QsJq39:ZpYrwrDAHuorOHytQUnPe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

19.84.20.11:3030

Targets

    • Target

      f5bd3f5d163b58fefd08d4a3ed49f1b2_JaffaCakes118

    • Size

      72KB

    • MD5

      f5bd3f5d163b58fefd08d4a3ed49f1b2

    • SHA1

      83a6b126781a68871b068d92bc7b9e82a504ebb9

    • SHA256

      90d46918ac83f5d21a183cfd42c83c2ea7adb7904f1e171f1e143e252a34bb26

    • SHA512

      bb639bddb1dfb195f1ce1a9a55ab4672335d993a13bc25b40e9d38d4c72891a7745b69e6c4712dbcba2e072068d17aaa284e9bdb5f659d0fa3c20a079d658243

    • SSDEEP

      1536:I68onDLYO9fgwr8+AFjFuorOHy6cyhUtN0QMb+KR0Nc8QsJq39:ZpYrwrDAHuorOHytQUnPe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks