metasploit | d5dc6324a98fc11e7d963fb06ff7e997d362e0ed5627830d8272569550bf9c4a | Triage

Sharing

General

Target

JaffaCakes118_5b146551fbc1989f6abcefaf60ff31c0
Size

72KB
Sample

250101-tacvystnan
MD5

5b146551fbc1989f6abcefaf60ff31c0
SHA1

f6ff71569b269f438a86cbfde5869ed7070b0c44
SHA256

d5dc6324a98fc11e7d963fb06ff7e997d362e0ed5627830d8272569550bf9c4a
SHA512

005b0f8c42aac6a82fb7191e4540531ac14c907ca4b1b38f5dac1694c36691e7c5dd74fb9a44d2dea7463aff19dc595dd94dd8a2fd4d358b559a1364f6e7e5a5
SSDEEP

1536:ItO+vtfD0IdbPA6Ba0OMGqnkeOyBwHNMb+KR0Nc8QsJq39:YOOD06P98j/HNe0Nc8QsC9

Score

10^/10

metasploit discovery

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.230.38:8989

Targets

- Target
  
  JaffaCakes118_5b146551fbc1989f6abcefaf60ff31c0
- Size
  
  72KB
- MD5
  
  5b146551fbc1989f6abcefaf60ff31c0
- SHA1
  
  f6ff71569b269f438a86cbfde5869ed7070b0c44
- SHA256
  
  d5dc6324a98fc11e7d963fb06ff7e997d362e0ed5627830d8272569550bf9c4a
- SHA512
  
  005b0f8c42aac6a82fb7191e4540531ac14c907ca4b1b38f5dac1694c36691e7c5dd74fb9a44d2dea7463aff19dc595dd94dd8a2fd4d358b559a1364f6e7e5a5
- SSDEEP
  
  1536:ItO+vtfD0IdbPA6Ba0OMGqnkeOyBwHNMb+KR0Nc8QsJq39:YOOD06P98j/HNe0Nc8QsC9
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2