General

  • Target

    f68c7df9506e27496f4263fba8e98344_JaffaCakes118

  • Size

    208KB

  • Sample

    240925-wgkv9asalf

  • MD5

    f68c7df9506e27496f4263fba8e98344

  • SHA1

    4c36a9e20333ac17f52922e43b2394905b11a1a7

  • SHA256

    f4dfea0046abd93116d879b4a85cf2b5afa3702fb10bc01a315373f87c3121c1

  • SHA512

    51396c9a06d18c59c58e8f60948568f999b92e0ec38604fbff1a0100887328f0f6f099fb84dfdfc01ff751723cecf67fe4ffae4d519492b808e1a1d72b98289b

  • SSDEEP

    6144:PNT0Ige+bpIQSE7M5ZsQYX+77hde3Ex1FZb:PNHge+b2xEIzK+Ph4ExRb

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.26.128:4444

Targets

    • Target

      f68c7df9506e27496f4263fba8e98344_JaffaCakes118

    • Size

      208KB

    • MD5

      f68c7df9506e27496f4263fba8e98344

    • SHA1

      4c36a9e20333ac17f52922e43b2394905b11a1a7

    • SHA256

      f4dfea0046abd93116d879b4a85cf2b5afa3702fb10bc01a315373f87c3121c1

    • SHA512

      51396c9a06d18c59c58e8f60948568f999b92e0ec38604fbff1a0100887328f0f6f099fb84dfdfc01ff751723cecf67fe4ffae4d519492b808e1a1d72b98289b

    • SSDEEP

      6144:PNT0Ige+bpIQSE7M5ZsQYX+77hde3Ex1FZb:PNHge+b2xEIzK+Ph4ExRb

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks