General
-
Target
JaffaCakes118_18a78b322bcc7dfabb02811cadea7967
-
Size
1.7MB
-
Sample
241231-nr9ncs1keq
-
MD5
18a78b322bcc7dfabb02811cadea7967
-
SHA1
013621a68d0875e1c9c94745a8b945542eb2cf3d
-
SHA256
5ed907dbad20604899e87d9da0e41f1a3e87cba9d93533f736d0ef9f28639340
-
SHA512
1c74ede15f601b4a23da73585650f855a9aa704801a6eedf2c13b4c4d407e0420ccdcfad01d09856ba999bbebc5c7434913ce56195393b673d46d3ab067e7f8c
-
SSDEEP
49152:jG8+5WGKZrb/TMvO90dL3BmAFd4A64nsfJUM/gTR55Ib7gz1:jG5uGvP
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_18a78b322bcc7dfabb02811cadea7967.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_18a78b322bcc7dfabb02811cadea7967.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/reverse_tcp
127.0.0.1:444
Targets
-
-
Target
JaffaCakes118_18a78b322bcc7dfabb02811cadea7967
-
Size
1.7MB
-
MD5
18a78b322bcc7dfabb02811cadea7967
-
SHA1
013621a68d0875e1c9c94745a8b945542eb2cf3d
-
SHA256
5ed907dbad20604899e87d9da0e41f1a3e87cba9d93533f736d0ef9f28639340
-
SHA512
1c74ede15f601b4a23da73585650f855a9aa704801a6eedf2c13b4c4d407e0420ccdcfad01d09856ba999bbebc5c7434913ce56195393b673d46d3ab067e7f8c
-
SSDEEP
49152:jG8+5WGKZrb/TMvO90dL3BmAFd4A64nsfJUM/gTR55Ib7gz1:jG5uGvP
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-