Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
13-12-2024 02:27
General
-
Target
e97360845c536734fbbe0762b063f76b_JaffaCakes118.exe
-
Size
34KB
-
MD5
e97360845c536734fbbe0762b063f76b
-
SHA1
2cca23b7d2f7b04dab2312de80552cfb5dff1c6f
-
SHA256
1ede71abb506ae8500747b52d7d3a55719a85fa8eb85140e8a1b6e7cb5a69449
-
SHA512
5e2968467e1c35c95f11a2577d914ecff4e50a2e6de761e0a881e37ea5935b0ffc2c9a4b66c3575946422dcc7ccdb98f41732d8adc6ec06a5a308aa8393fea1d
-
SSDEEP
768:sciYkKP4d53ULm+Y6s8RA/B8z8qaT1yJeNniEq7kPTaCA:lDFC16sk8qakARWkraCA
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/fnstenv_mov
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Drops file in System32 directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e97360845c536734fbbe0762b063f76b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e97360845c536734fbbe0762b063f76b_JaffaCakes118.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
4KB
-
Filesize
136KB