General

  • Target

    15a7a1039fe0ab19eba7affd5db66419_JaffaCakes118

  • Size

    37KB

  • MD5

    15a7a1039fe0ab19eba7affd5db66419

  • SHA1

    10167ff96cb756d41c145b312eb75a494526ffae

  • SHA256

    79b417d82b17f185f11bf7bbf408bdf9b13d2db998e1fd84e992054f51976e84

  • SHA512

    ce8fb5fae5c940984bd1ff185df05d2228c3d647a387ac0c985048315c5f059ed4bb03b2cd64fe965313647098b607670013b9eeabfe078f5c6d754a97451fd9

  • SSDEEP

    768:hVASSMdRuSNrpQxIBHLORAwcqLpNP3dKm66lRZ95x:fY6u+wBO1wrP3Ich5x

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

85.154.17.180:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 15a7a1039fe0ab19eba7affd5db66419_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    2e80c00d68efcf6d11ca6cbbc73bd947


    Headers

    Imports

    Sections