Overview

overview

10

Static

static

10

JaffaCakes...c9.exe

windows7-x64

10

JaffaCakes...c9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6e27da57eb953b5b285e2a8068c1dd69147c06e92c6acb92fe97ee515fb16fc9

  • Size

    1KB

  • Sample

    241224-ml3r7avqan

  • MD5

    574472decb54da77022fd05e4aa5e6c1

  • SHA1

    b6532e1083de00796b1e29d74453d06f1e341fee

  • SHA256

    6e27da57eb953b5b285e2a8068c1dd69147c06e92c6acb92fe97ee515fb16fc9

  • SHA512

    9d268953c8828838b95bffcdaf49e4c1b63a796aa09444ab0ad6ebe20747a9010f11606f9e027bcf686f56810ecff7c14e63898ad80e9d68fe148c355d3e8c50

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://175.178.239.127:80/comm/change/RDS3S6X8

Attributes
  • headers Accept: image/*, text/html, application/xhtml+xml Accept-Language: ro-md Accept-Encoding: gzip, compress User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.82 Safari/537.36

Targets

    • Target

      JaffaCakes118_6e27da57eb953b5b285e2a8068c1dd69147c06e92c6acb92fe97ee515fb16fc9

    • Size

      1KB

    • MD5

      574472decb54da77022fd05e4aa5e6c1

    • SHA1

      b6532e1083de00796b1e29d74453d06f1e341fee

    • SHA256

      6e27da57eb953b5b285e2a8068c1dd69147c06e92c6acb92fe97ee515fb16fc9

    • SHA512

      9d268953c8828838b95bffcdaf49e4c1b63a796aa09444ab0ad6ebe20747a9010f11606f9e027bcf686f56810ecff7c14e63898ad80e9d68fe148c355d3e8c50

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks