General

  • Target

    fe2400a94f54ed85e9137c3ba113a2c3_JaffaCakes118

  • Size

    72KB

  • MD5

    fe2400a94f54ed85e9137c3ba113a2c3

  • SHA1

    639cdaff9569510eda2505178d6a68a967095092

  • SHA256

    616cef00413e8459b8011698fd53df1240fd802a7a130ac1e748330cc845b690

  • SHA512

    4ff8c6d7761989de9654273791ce8d604099ff843c0c87ad5baefac50aee8fb97e7e16518ef0f1f9c93d0e002cbafc7c880e3b08ba834da04a7cc49b9f7cc6f1

  • SSDEEP

    1536:IfFkTgr0GRXNTWjSLl4yHpw/dQ+Yx3aLMb+KR0Nc8QsJq39:+qYPOGLlXHpw/a+EKLe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

51.79.158.48:4041

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe2400a94f54ed85e9137c3ba113a2c3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections