General

  • Target

    JaffaCakes118_a837f80b517b3ab38a8875d184c6b2c0c2ba52e99d57491b8ea81b01f420a91f

  • Size

    769KB

  • Sample

    241224-v17zfstjer

  • MD5

    239bbfc54eb18915a85b1a7a79c1e94f

  • SHA1

    88038e2bcaca45c8a42cd3975dc11a5d4fd5315f

  • SHA256

    a837f80b517b3ab38a8875d184c6b2c0c2ba52e99d57491b8ea81b01f420a91f

  • SHA512

    2ce6d3c613e3aaca712b247f8abc1f0c71d4ab818146d9415c2a9696ba27fc0eae862d5a092fc112acb95d04ced16396c4ccb10424b1099851fa1cf5a10288bb

  • SSDEEP

    12288:pyVuGSc2XrpGb93cN+Kk+OpGbO9nzaAylQ1lOJUdQYxU4WuTpzQsunvl111Rqa:clKVGb9cN+VJu6DU0pzQsyvd1RX

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://121.204.159.10:8765/tv99

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BOIE9;ENUSMSNIP)

Targets

    • Target

      85b750a8f9a40334b856936001eb8a397571da5653bd7e28e524a7ed3136bbb7

    • Size

      1.2MB

    • MD5

      47d2e9d77e0a0842dfba15827e2d59f0

    • SHA1

      d842468cb759e125cb324e5b96b6fa2448af5c2e

    • SHA256

      85b750a8f9a40334b856936001eb8a397571da5653bd7e28e524a7ed3136bbb7

    • SHA512

      14454b6a6747b10ab469cffc6415cba8012b6522f54f3a88777d72b12b726cc0cb5d3fb03425a35d65961054f8dec1635fea4b472b85fdaeabba0b9f24f9dcb0

    • SSDEEP

      24576:wJlxmR7KEWf6QBGF5/jMlryqeE8YlgvO2xaXwtPXkKXX72Xu:m+IEWcn/jTqQlkk7n

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks