Analysis
-
max time kernel
14s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
25-12-2024 13:32
General
-
Target
JaffaCakes118_1fadab489997035f530de69ec7b6bd026b9ec75f7d86d477e68ed38eb661a11e.exe
-
Size
4.4MB
-
MD5
9b09bb786f415c5fee6f6f34b23cf28e
-
SHA1
00d6cd58e2cd932151c18b5c285d8a7e7a6d4aa2
-
SHA256
1fadab489997035f530de69ec7b6bd026b9ec75f7d86d477e68ed38eb661a11e
-
SHA512
8af5ca72e77c759bdf61b1ed58aa6f61f0c406c4075e6e3f3ff6587dfe65c59b25565969be24a6a6fbf7aaadbef8c88076b74d6fa9888dd38bdcedd6f263e7ba
-
SSDEEP
98304:VTob8QH57XzQ0W/F92bARPxCzl1XTS8Li1EoYYRQN36V4FJYzLr/f+MXVmd:2bBlXsj/F9IKcR1EeYRw6CbYzGMFmd
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/single_exec
Signatures
-
Glupteba
Glupteba is a modular loader written in Golang with various components.
-
Glupteba family
-
Glupteba payload 4 IoCs
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1fadab489997035f530de69ec7b6bd026b9ec75f7d86d477e68ed38eb661a11e.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1fadab489997035f530de69ec7b6bd026b9ec75f7d86d477e68ed38eb661a11e.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
9.1MB
-
Filesize
9.3MB
-
Filesize
4.2MB
-
Filesize
35.9MB
-
Filesize
9.1MB