General

  • Target

    2fd898dddd10ba9400aecbd51d3cf307_JaffaCakes118

  • Size

    72KB

  • MD5

    2fd898dddd10ba9400aecbd51d3cf307

  • SHA1

    1c81764781ee833fbcef8208eb807bd94f08b854

  • SHA256

    a8e0c4a60bff6bd198a5a35c38bb5f93ca4f490182eb2ac7311b2b4d485500ab

  • SHA512

    6c92759212c9f082102b01eb1dd6427642660e714b8d13d34743b32a901a9aaa44a308c701ea515a472fc55e387f0fc11283546aef92f9ef853520b88bc9b8a9

  • SSDEEP

    1536:Is/q5kxsu3w6GlYTN73f4Mb+KR0Nc8QsJq39:+kxsuA6IYTN7v4e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

77.253.248.93:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2fd898dddd10ba9400aecbd51d3cf307_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections