General

  • Target

    JaffaCakes118_5fb5413efba7e57038eddf10b9f185ff

  • Size

    72KB

  • Sample

    250101-wy26vsxkbz

  • MD5

    5fb5413efba7e57038eddf10b9f185ff

  • SHA1

    5f3f4b0a2bbdc38696f1bb116e7250d7fa551f45

  • SHA256

    37f04e6d8b5d05b9f56ab43150d1ca0bf5d05675e5e921abc3d38f6bbf2a7dab

  • SHA512

    77fa9503b58afe14a028372b5a1b7e686ca1f66a30d9d0dec7bbdce6290866be1510b9e6d3d260f6ae231648e5bdaa9d05ecb6b74de901171fb9eed2d3d99ad6

  • SSDEEP

    1536:InV/m/jnoxwgVRslcy5nbAEHqYxAQuNMMb+KR0Nc8QsJq39:c/m/jox1VRslcyNAgqY2QkMe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

5.9.60.226:443

Targets

    • Target

      JaffaCakes118_5fb5413efba7e57038eddf10b9f185ff

    • Size

      72KB

    • MD5

      5fb5413efba7e57038eddf10b9f185ff

    • SHA1

      5f3f4b0a2bbdc38696f1bb116e7250d7fa551f45

    • SHA256

      37f04e6d8b5d05b9f56ab43150d1ca0bf5d05675e5e921abc3d38f6bbf2a7dab

    • SHA512

      77fa9503b58afe14a028372b5a1b7e686ca1f66a30d9d0dec7bbdce6290866be1510b9e6d3d260f6ae231648e5bdaa9d05ecb6b74de901171fb9eed2d3d99ad6

    • SSDEEP

      1536:InV/m/jnoxwgVRslcy5nbAEHqYxAQuNMMb+KR0Nc8QsJq39:c/m/jox1VRslcyNAgqY2QkMe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks