Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07-12-2024 00:38
General
-
Target
cfd483c9e63f02f43c43844f763899e9_JaffaCakes118.exe
-
Size
5KB
-
MD5
cfd483c9e63f02f43c43844f763899e9
-
SHA1
b0bcd10011350a2d56e0289de82b10c99408104d
-
SHA256
e4990de72be1c9fe12c4104a6aa648995fb8a40c347ffbbe35bd82cadea079ad
-
SHA512
88c680cab0ec78c1937f139732e86f3be7f23e9ec68fbb4839eea2a8bdaa70c5ce2d65fd2d1a7e5a5a22d7634a3cf8b7ebc07c85bd120c02c02f2636c7248368
-
SSDEEP
96:tBqd1lDLrouuNgJST2g0F5oXMpIuZ/19ozNt:tBgFYung0FEMpVZt9q
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
metasploit_stager
C2
192.168.49.83:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
Processes
-
C:\Users\Admin\AppData\Local\Temp\cfd483c9e63f02f43c43844f763899e9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\cfd483c9e63f02f43c43844f763899e9_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
24KB
-
Filesize
4KB
-
Filesize
10.8MB
-
Filesize
8KB