General

  • Target

    d80b6ff5585b3cc559e0797f78ebd5ae_JaffaCakes118

  • Size

    95KB

  • Sample

    241208-va1sfstqen

  • MD5

    d80b6ff5585b3cc559e0797f78ebd5ae

  • SHA1

    d7da6f67a2dde3bf2b66941606e62621dcd7d2f9

  • SHA256

    7fc7a1a65d381d35c31717bd29b67ec99673bd844296d5dde4a8fa20ff8e6ce7

  • SHA512

    33e35df00713336aa1d041750279e88b4e3293fd3e63313ae6f4572a74490c54d11be9f5669079a333ac8110e9b07ab1fb5f5af3aba74c88ca4cda2404058239

  • SSDEEP

    768:mvqDpAlkrbStNUrp/3jjQP21nyVdkV+lBPY7l4maxN4aVXLBxa1vCuvWOZnB4jzt:JV2sbStW/Tc+h8A+lBwDahWRNvWOQAQ

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.107.141:8888

Targets

    • Target

      d80b6ff5585b3cc559e0797f78ebd5ae_JaffaCakes118

    • Size

      95KB

    • MD5

      d80b6ff5585b3cc559e0797f78ebd5ae

    • SHA1

      d7da6f67a2dde3bf2b66941606e62621dcd7d2f9

    • SHA256

      7fc7a1a65d381d35c31717bd29b67ec99673bd844296d5dde4a8fa20ff8e6ce7

    • SHA512

      33e35df00713336aa1d041750279e88b4e3293fd3e63313ae6f4572a74490c54d11be9f5669079a333ac8110e9b07ab1fb5f5af3aba74c88ca4cda2404058239

    • SSDEEP

      768:mvqDpAlkrbStNUrp/3jjQP21nyVdkV+lBPY7l4maxN4aVXLBxa1vCuvWOZnB4jzt:JV2sbStW/Tc+h8A+lBwDahWRNvWOQAQ

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks