Analysis
-
max time kernel
105s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
26-11-2024 06:48
General
-
Target
a06d655b8f3c6e9b6a0c39730ad77eff_JaffaCakes118.exe
-
Size
72KB
-
MD5
a06d655b8f3c6e9b6a0c39730ad77eff
-
SHA1
68a07a4f3ba903cfce66bb84ddaf9f943956d66d
-
SHA256
b24cce2be5cda803d26418eeaaa9608b32b01b337137ec2baa7d7d89f5a8d1ee
-
SHA512
6a70421284422dc6eefcf773a3e756562e67e1a72026af28d72c58dba2cd8887222ad22006ddaad867f2d3b1b7e554b349673d6d8fa61d5287d09fc31ca600da
-
SSDEEP
1536:I7n5jhMz8xTs7H4rAs1DQW7bP/lMb+KR0Nc8QsJq39:QnXMz86j4J1DQWPP/le0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
178.254.73.248:12345
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a06d655b8f3c6e9b6a0c39730ad77eff_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a06d655b8f3c6e9b6a0c39730ad77eff_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB