Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
18-12-2024 18:41
General
-
Target
fcb1cfc8a8d0c796e1f454acfbe105dc_JaffaCakes118.exe
-
Size
77KB
-
MD5
fcb1cfc8a8d0c796e1f454acfbe105dc
-
SHA1
fc4fdfbec42e2ce3cd038e8ec54b6f84eba5f6b3
-
SHA256
859206cd2b591a13bd530e8e1054fe47a413ad8693d5f6d897543dc96a64e0d7
-
SHA512
0126cc00a911c7666aaf58fcd548506d31292b0b883d7811aa0c2a4f8c05dfff290110f17e43bd8d10ae4c25c40d27f07f7cb1c9684d8097b8c8526f649969b7
-
SSDEEP
1536:vFwi1ZsINXY8ixQE2TPnV0FYew/fw8J/pfaTFIg1PmWgnCQLfnnnv9WXclw:vFwi1ZY8lVPew/fw8bfaCEQLfnvsslw
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/fnstenv_mov
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fcb1cfc8a8d0c796e1f454acfbe105dc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fcb1cfc8a8d0c796e1f454acfbe105dc_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: RenamesItself
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
12KB
-
Filesize
188KB
-
Filesize
188KB