General

  • Target

    JaffaCakes118_2a0a47c03449b087f0a4fb6387b7605e2581af2291e0aec966e8deb410297310

  • Size

    3KB

  • Sample

    241223-3tmzpsvqby

  • MD5

    297a027f626a0830b93c189b38296be5

  • SHA1

    050fc2be1dde21eb2bb0c4fbc8f1ea3424407eb2

  • SHA256

    2a0a47c03449b087f0a4fb6387b7605e2581af2291e0aec966e8deb410297310

  • SHA512

    181f138e6cec6310d4c9f3dbfe5ddc1c08e151daeecfd61785a660444dc021bab5fa8c0492de82fb9feb0fe5b66306392da31fdf9e7febc4bb6e1b6124c1be41

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

172.16.106.10:5360

Targets

    • Target

      JaffaCakes118_2a0a47c03449b087f0a4fb6387b7605e2581af2291e0aec966e8deb410297310

    • Size

      3KB

    • MD5

      297a027f626a0830b93c189b38296be5

    • SHA1

      050fc2be1dde21eb2bb0c4fbc8f1ea3424407eb2

    • SHA256

      2a0a47c03449b087f0a4fb6387b7605e2581af2291e0aec966e8deb410297310

    • SHA512

      181f138e6cec6310d4c9f3dbfe5ddc1c08e151daeecfd61785a660444dc021bab5fa8c0492de82fb9feb0fe5b66306392da31fdf9e7febc4bb6e1b6124c1be41

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks