Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...13.exe

windows7-x64

10

JaffaCakes...13.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_2cd455a348b55ca3809ce16bad516a37f798370e9cd264303e327ef147b6c613

  • Size

    4KB

  • Sample

    241225-1l47xayndz

  • MD5

    1f22e11d0f91d1e2e32ef5d5b8951767

  • SHA1

    2af16c31f88ec756bba2d6777730842f1b7d518c

  • SHA256

    2cd455a348b55ca3809ce16bad516a37f798370e9cd264303e327ef147b6c613

  • SHA512

    d7fb6079fe1f02baf46bbfb812d2c3144b32cd43ea36485184ea85d085fc425ca59301e7321a1c1f8da0df8392e5317ff526726d262d2ae62ab9326ae9d1c636

  • SSDEEP

    48:6PiecTCNmAkfRLh+jINpwITn6pwBiqeambgEhVXGVhvUzxXFXt0l/jbzL/rBIpZ:+hNoRdISiiv9MUEbEvUzx1SlLXL/rupZ

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.97.56.220:4444

Targets

    • Target

      JaffaCakes118_2cd455a348b55ca3809ce16bad516a37f798370e9cd264303e327ef147b6c613

    • Size

      4KB

    • MD5

      1f22e11d0f91d1e2e32ef5d5b8951767

    • SHA1

      2af16c31f88ec756bba2d6777730842f1b7d518c

    • SHA256

      2cd455a348b55ca3809ce16bad516a37f798370e9cd264303e327ef147b6c613

    • SHA512

      d7fb6079fe1f02baf46bbfb812d2c3144b32cd43ea36485184ea85d085fc425ca59301e7321a1c1f8da0df8392e5317ff526726d262d2ae62ab9326ae9d1c636

    • SSDEEP

      48:6PiecTCNmAkfRLh+jINpwITn6pwBiqeambgEhVXGVhvUzxXFXt0l/jbzL/rBIpZ:+hNoRdISiiv9MUEbEvUzx1SlLXL/rupZ

    Score
    10/10
    metasploitbackdoortrojandiscovery

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks