Analysis
-
max time kernel
126s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
03-12-2024 07:55
General
-
Target
bc6b560888490891c2fb0a5d0faf5db3_JaffaCakes118.exe
-
Size
68KB
-
MD5
bc6b560888490891c2fb0a5d0faf5db3
-
SHA1
776eea7c6f19b1b55f0e33083e9b830ca7fa849c
-
SHA256
b597a0bce3327582327db3b22b208aee26a72e50a4a65c07f1883c3576e5a54a
-
SHA512
5cd435e134e311e412a6ddbd7d88c3801a093e310f3cf036d3f4a86ca84e1854046461064fe968da768b5178f5831b5c8655640095fec2e547e0f18964ea38ea
-
SSDEEP
1536:Kun9fT2lHCH7kXcTM0oIhZJI03JUEbooPRrKKR5Y6beKGPD/9Zlk5Nequ:Fnp4HMBIJizI03JltZrpR5YOeKGPD/9z
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.1.100:31337
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc6b560888490891c2fb0a5d0faf5db3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\bc6b560888490891c2fb0a5d0faf5db3_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB