Analysis
-
max time kernel
139s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
14/10/2024, 14:28
General
-
Target
42b26927523a7071ddf31886d2a40bdd_JaffaCakes118.exe
-
Size
141KB
-
MD5
42b26927523a7071ddf31886d2a40bdd
-
SHA1
6659cdbd279c733450f6d6a5b452e3103a692cf1
-
SHA256
70d87bbd9b905587782d6afd1e4bd3ec5f748ffb808e571d91666024ea236fab
-
SHA512
b68d4e53a1f402c995a010bf7e56f58d5dd13a7c8da501796b577d7d040ea3d078fa816f97e1a70eb14858daad421d2600b398113193f49eff9e1b638a5b5f7b
-
SSDEEP
3072:H1vqm4yTB7ytH3w01h2IuvMPlBpFjZqMN5:8GIZ3Z1h2IuQv5
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.1.47:3345
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\42b26927523a7071ddf31886d2a40bdd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\42b26927523a7071ddf31886d2a40bdd_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB