Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
29-11-2024 03:25
General
-
Target
ae98472ac1416c453d0317dfce986ad2_JaffaCakes118.exe
-
Size
61KB
-
MD5
ae98472ac1416c453d0317dfce986ad2
-
SHA1
f6a910beee0d5b7948f8edb11b5032f5d4953439
-
SHA256
11521347911af00d60d6cc34e1864f0d245d66dc6eceaeabe9efd3da6699185e
-
SHA512
469105064cd105371f291e84fc6bb67cfe67718451d2dfe52e79e987b7ee6e2ca6d3e7546877ca1dc5d8ae2e22447b64d38906884b0a7f1f13865e49a42a3a37
-
SSDEEP
1536:UdyQT88pJr0MY3cDmAOCOdAAlpvKXiK2pPoDORImU:0zT8IJQcedAUvKy79oDUI/
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/fnstenv_mov
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae98472ac1416c453d0317dfce986ad2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ae98472ac1416c453d0317dfce986ad2_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: RenamesItself
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
260KB
-
Filesize
12KB
-
Filesize
260KB
-
Filesize
12KB
-
Filesize
260KB
-
Filesize
260KB