Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
18-12-2024 14:29
General
-
Target
fbe81a39520d6b385fca9d7e8d1d7765_JaffaCakes118.exe
-
Size
72KB
-
MD5
fbe81a39520d6b385fca9d7e8d1d7765
-
SHA1
f4bb041b66f05682d880b9c298467603600a07c3
-
SHA256
5bd7dd8c1087c7d52f7c581b6faae985d9fe100cd0a1b9e698191ad49c543c68
-
SHA512
901e60ece3dcb0a28737e88961453960b7dd43810d258f2e846ebb309108f25148ffef3983cd58be35a39ac5ab2068e912a617d7c71cdbac98309f57b15de51b
-
SSDEEP
1536:IK5FGitleUxqt1r3wIBBPA9HxPAL75MMb+KR0Nc8Qs:l5FGiTxqfrg+45pe0Nc8Qs
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\fbe81a39520d6b385fca9d7e8d1d7765_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fbe81a39520d6b385fca9d7e8d1d7765_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB