General
-
Target
JaffaCakes118_a837f80b517b3ab38a8875d184c6b2c0c2ba52e99d57491b8ea81b01f420a91f
-
Size
769KB
-
Sample
241224-v17zfstjer
-
MD5
239bbfc54eb18915a85b1a7a79c1e94f
-
SHA1
88038e2bcaca45c8a42cd3975dc11a5d4fd5315f
-
SHA256
a837f80b517b3ab38a8875d184c6b2c0c2ba52e99d57491b8ea81b01f420a91f
-
SHA512
2ce6d3c613e3aaca712b247f8abc1f0c71d4ab818146d9415c2a9696ba27fc0eae862d5a092fc112acb95d04ced16396c4ccb10424b1099851fa1cf5a10288bb
-
SSDEEP
12288:pyVuGSc2XrpGb93cN+Kk+OpGbO9nzaAylQ1lOJUdQYxU4WuTpzQsunvl111Rqa:clKVGb9cN+VJu6DU0pzQsyvd1RX
Static task
static1
Behavioral task
behavioral1
Sample
85b750a8f9a40334b856936001eb8a397571da5653bd7e28e524a7ed3136bbb7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
85b750a8f9a40334b856936001eb8a397571da5653bd7e28e524a7ed3136bbb7.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/download_exec
http://121.204.159.10:8765/tv99
- headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BOIE9;ENUSMSNIP)
Targets
-
-
Target
85b750a8f9a40334b856936001eb8a397571da5653bd7e28e524a7ed3136bbb7
-
Size
1.2MB
-
MD5
47d2e9d77e0a0842dfba15827e2d59f0
-
SHA1
d842468cb759e125cb324e5b96b6fa2448af5c2e
-
SHA256
85b750a8f9a40334b856936001eb8a397571da5653bd7e28e524a7ed3136bbb7
-
SHA512
14454b6a6747b10ab469cffc6415cba8012b6522f54f3a88777d72b12b726cc0cb5d3fb03425a35d65961054f8dec1635fea4b472b85fdaeabba0b9f24f9dcb0
-
SSDEEP
24576:wJlxmR7KEWf6QBGF5/jMlryqeE8YlgvO2xaXwtPXkKXX72Xu:m+IEWcn/jTqQlkk7n
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-