Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
03-10-2024 00:31
General
-
Target
0d1b3fbc30c399e123bb945130390302_JaffaCakes118.exe
-
Size
4KB
-
MD5
0d1b3fbc30c399e123bb945130390302
-
SHA1
56ea208b88b9497e0c7a5de6cce99210cad09c0a
-
SHA256
eab486a2b497be69eb348179ab0f1e3173120c72354068e095719c77a2315b2b
-
SHA512
fa1c75ece5f938a669b480094803982fd538780a2d3f75a6d0315963675294f153db9bf5a93e85f578bb5f55adb0f32cbbe2f1058ca25fc5139c2fb589c102d2
-
SSDEEP
96:9vP4gjN9KFCGYWibN8WI1YMWZDgq4KlmeABQ1:pPDH0UxI4D5BWBy
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp_allports
C2
79.55.118.156:8080
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0d1b3fbc30c399e123bb945130390302_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0d1b3fbc30c399e123bb945130390302_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
-
Filesize
16KB