Analysis
-
max time kernel
105s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
26-09-2024 07:09
General
-
Target
f7d5c762c8c35e34394be15381c03120_JaffaCakes118.exe
-
Size
72KB
-
MD5
f7d5c762c8c35e34394be15381c03120
-
SHA1
5f38e46f7eee84662b821c158268766f79490fee
-
SHA256
5f823a74bf441f005492150de9aa35b47bcf1de919136e2f326949c3930bccdd
-
SHA512
2ca95494b0c78301f5290e7a8482887ba817d30119bd65a426a9dc5a19ac700decd986ec7ebef7861c60a7d4cf3990cd73d43a4397b35cdc9483d5c8f7b675f5
-
SSDEEP
1536:Iz7FFJPS3r4Kqw9hs2/9Rn3aOZ+602Mb+KR0Nc8Qs:wZFJPSOshs2/r3v0Oe0Nc8Qs
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.58.128:31337
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f7d5c762c8c35e34394be15381c03120_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f7d5c762c8c35e34394be15381c03120_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB