Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
04-12-2024 21:22
General
-
Target
c4712cfd56df32d908afcdac0a338caf_JaffaCakes118.exe
-
Size
12KB
-
MD5
c4712cfd56df32d908afcdac0a338caf
-
SHA1
d253e52e62453ce9a5b720d91dc76f126072ac8f
-
SHA256
ac7615d3ca99d893d198e8cd4d716d3ac20fc1a2d5030e284e944b39b6eca7da
-
SHA512
10d25026adf1103d11c05a480316e825418b6dc1160ca97580fc37f4ef947daa4f666558052bb5bd78468c73daff4856571c552bde00c7765622283e25414fa0
-
SSDEEP
48:6R6d0uW1H/i3Ajv4FQMWdxqai848wL+epB3mn:Ac0uW1f1L4FQMWdvi8BwL+4Rg
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
127.0.0.1:1338
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c4712cfd56df32d908afcdac0a338caf_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c4712cfd56df32d908afcdac0a338caf_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
32KB