General

  • Target

    a33f65fcb17f7c5789abcbd1b1631427_JaffaCakes118

  • Size

    86KB

  • Sample

    241126-v6v7vaxpgm

  • MD5

    a33f65fcb17f7c5789abcbd1b1631427

  • SHA1

    9851d7213770730412dbf0a8056fc99c04e0378b

  • SHA256

    ba74372bf0cde1e482d41913d4efe770c403d012bee38bdba307b4d0c18cdeff

  • SHA512

    3ff6f875cce369f7267d3a55a0f0ff19c8cfa190126783902737891378601d4fcb334007ecbd2b56916b9b2019a1a0912d3bd467501dd37b873a624dce061d1a

  • SSDEEP

    1536:2iv/NzFqFyRPCsLBPi6EczQVC3RbwSzKQ589g4SNRLXWlrRfgS:2MUqFLIddpQ5899S2dv

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.234.134:2094

Targets

    • Target

      a33f65fcb17f7c5789abcbd1b1631427_JaffaCakes118

    • Size

      86KB

    • MD5

      a33f65fcb17f7c5789abcbd1b1631427

    • SHA1

      9851d7213770730412dbf0a8056fc99c04e0378b

    • SHA256

      ba74372bf0cde1e482d41913d4efe770c403d012bee38bdba307b4d0c18cdeff

    • SHA512

      3ff6f875cce369f7267d3a55a0f0ff19c8cfa190126783902737891378601d4fcb334007ecbd2b56916b9b2019a1a0912d3bd467501dd37b873a624dce061d1a

    • SSDEEP

      1536:2iv/NzFqFyRPCsLBPi6EczQVC3RbwSzKQ589g4SNRLXWlrRfgS:2MUqFLIddpQ5899S2dv

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks