General
-
Target
c2d4423fc753b477ce95cbcccbde79e6_JaffaCakes118
-
Size
97KB
-
Sample
241204-q566hasmgq
-
MD5
c2d4423fc753b477ce95cbcccbde79e6
-
SHA1
0d82e15dc662a11ffbdb4e9faa126bc67ce28feb
-
SHA256
e3f01d5106cdf16a14ce00ff68975cd4e347ab8083969b212a711168e1ed8cec
-
SHA512
904c8af432bc1503aea610808ea1af45e14a693e00df932823da08edb38f38e36703ce919ea75ec458eef6128eb422443ab50d064b8f2947903792ae62bc6f9d
-
SSDEEP
1536:cNDDAABn5JE3DMHwxmvLhxM8HeLXfVOZDV4bNNwrbjtzx+aiS7WWwvg:ksABnkYWmkZLymSvBx+aiSN
Static task
static1
Behavioral task
behavioral1
Sample
c2d4423fc753b477ce95cbcccbde79e6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c2d4423fc753b477ce95cbcccbde79e6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/shell_reverse_tcp
192.168.1.3:4444
Targets
-
-
Target
c2d4423fc753b477ce95cbcccbde79e6_JaffaCakes118
-
Size
97KB
-
MD5
c2d4423fc753b477ce95cbcccbde79e6
-
SHA1
0d82e15dc662a11ffbdb4e9faa126bc67ce28feb
-
SHA256
e3f01d5106cdf16a14ce00ff68975cd4e347ab8083969b212a711168e1ed8cec
-
SHA512
904c8af432bc1503aea610808ea1af45e14a693e00df932823da08edb38f38e36703ce919ea75ec458eef6128eb422443ab50d064b8f2947903792ae62bc6f9d
-
SSDEEP
1536:cNDDAABn5JE3DMHwxmvLhxM8HeLXfVOZDV4bNNwrbjtzx+aiS7WWwvg:ksABnkYWmkZLymSvBx+aiSN
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Suspicious use of SetThreadContext
-