General

  • Target

    JaffaCakes118_3fda97145f2c4f9b35bfadb80717e8a57de1e5b9eeb505241f700bd8ca633e36

  • Size

    3KB

  • Sample

    241230-gwp17azrbj

  • MD5

    9f79320ba356c3259742188b5bd3638e

  • SHA1

    080870caed16aed28abbddda146746f819b472ef

  • SHA256

    3fda97145f2c4f9b35bfadb80717e8a57de1e5b9eeb505241f700bd8ca633e36

  • SHA512

    1e314f2bac6eaa4a4b0bf56c54804ef7a1b72455a4b92fd92b1e85902b2ac85db74f2e465c5bba2a8f9b56e25edda82290e511340e1e3dd7e80ab08a563844d6

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

10.158.3.3:4433

Targets

    • Target

      JaffaCakes118_3fda97145f2c4f9b35bfadb80717e8a57de1e5b9eeb505241f700bd8ca633e36

    • Size

      3KB

    • MD5

      9f79320ba356c3259742188b5bd3638e

    • SHA1

      080870caed16aed28abbddda146746f819b472ef

    • SHA256

      3fda97145f2c4f9b35bfadb80717e8a57de1e5b9eeb505241f700bd8ca633e36

    • SHA512

      1e314f2bac6eaa4a4b0bf56c54804ef7a1b72455a4b92fd92b1e85902b2ac85db74f2e465c5bba2a8f9b56e25edda82290e511340e1e3dd7e80ab08a563844d6

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks