Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
31/12/2024, 15:44
General
-
Target
JaffaCakes118_25e09d5ac7f4f13568c870770ff62caa.exe
-
Size
11.7MB
-
MD5
25e09d5ac7f4f13568c870770ff62caa
-
SHA1
d084597445117fe9af6767b7b7242cb3be0b60d1
-
SHA256
7fc9fcf358367e1fead315b4da8ace24ba3a9ec085284746592699fead48b26a
-
SHA512
14eb3d144fb5f05aa3850d5fe7ad5cd82e9b759bc0df9e8ed3d528a9e3b07bd971c9e6a0c616449c0e9e817790e06b9c967c20b3914d2b67d63760763ed648d4
-
SSDEEP
196608:ZbHBKEydX7uwSkyQAcDzb5MsDaEhSUxhhHfe+pKfCe9iLbzO/YuLhifVvmHS8e43:ZfDDsBfHfppBvO/vhifVvi2k
Malware Config
Extracted
metasploit
windows/shell_reverse_tcp
79.132.12.162:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_25e09d5ac7f4f13568c870770ff62caa.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_25e09d5ac7f4f13568c870770ff62caa.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
11.9MB
-
Filesize
11.9MB