Overview

overview

10

Static

static

3

JaffaCakes...ef.exe

windows7-x64

10

JaffaCakes...ef.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_d9316f608fefe966a073cc79381a63c27da6b0db00a70fd34b672ca429bde8ef

  • Size

    250KB

  • Sample

    241224-sfrqmazqdn

  • MD5

    577a7463c63d02169a33ca2736f7ac98

  • SHA1

    cb34c1b37698cfd3fc0382abaec40e463354b6c3

  • SHA256

    d9316f608fefe966a073cc79381a63c27da6b0db00a70fd34b672ca429bde8ef

  • SHA512

    a5deb168a322914db09a1a2c5eb20f33c2913e542a5a0e777c390c4b11034d03a62de59d91fd8fc9b379aa55041d51818ea327486e3452de4eae0da314ff2a57

  • SSDEEP

    6144:L3j/Zua8BWOpto2j6p+MqVIAeAOOK6E3A:Tj/Zua8BWOg2j60IN8NE3

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://globalpressinfo.com:443/jquery-3.3.1.slim.min.js

Targets

    • Target

      JaffaCakes118_d9316f608fefe966a073cc79381a63c27da6b0db00a70fd34b672ca429bde8ef

    • Size

      250KB

    • MD5

      577a7463c63d02169a33ca2736f7ac98

    • SHA1

      cb34c1b37698cfd3fc0382abaec40e463354b6c3

    • SHA256

      d9316f608fefe966a073cc79381a63c27da6b0db00a70fd34b672ca429bde8ef

    • SHA512

      a5deb168a322914db09a1a2c5eb20f33c2913e542a5a0e777c390c4b11034d03a62de59d91fd8fc9b379aa55041d51818ea327486e3452de4eae0da314ff2a57

    • SSDEEP

      6144:L3j/Zua8BWOpto2j6p+MqVIAeAOOK6E3A:Tj/Zua8BWOg2j60IN8NE3

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks