Analysis
-
max time kernel
13s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
27-11-2024 02:47
General
-
Target
a582d94fadda8663e0d4c686688d5784_JaffaCakes118.exe
-
Size
36KB
-
MD5
a582d94fadda8663e0d4c686688d5784
-
SHA1
7a069045cf192de0ac30340ada1ae3ae929be826
-
SHA256
d8db33ce4b1b62f2ed9445994311081391d9add4a4fe3fa845f22ad2a1a0c344
-
SHA512
30cd876981c930a20bfe1677d544337678746f20b7f818edee7b006f78d8f796c2ca5790433f7da688b01608fb09ca923a51380ccf694cd6330eec8fefc749a2
-
SSDEEP
768:8Kzy6X6ElhZgjh5aKXxKq0IMMi84hgK7pHQEHE0f9JNs1731U34WV:8Iy6Nhqtxxty/Z19JOdlU34WV
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/fnstenv_mov
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Drops file in System32 directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a582d94fadda8663e0d4c686688d5784_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a582d94fadda8663e0d4c686688d5784_JaffaCakes118.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
140KB
-
Filesize
140KB