General

  • Target

    JaffaCakes118_6873757db85d559df13df7fb3c8036ce

  • Size

    1024B

  • Sample

    250102-1tra1sxkgs

  • MD5

    6873757db85d559df13df7fb3c8036ce

  • SHA1

    a4003eee5b7cab8584d595b6d464ae77c55b1ea4

  • SHA256

    fe1a2bdbf8bdbd4443e85e8a25589b8fe684291ad4935742c93e57b1e1de1518

  • SHA512

    8292783c85df47a8a1872f25cd459570e20211f2c4841adf8bc3477e10607ccc6cd56a33408dcb18e87fd85a97efa0d9ee0fdec88aaf01a27e16b701ea2b5956

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.99:443

Targets

    • Target

      JaffaCakes118_6873757db85d559df13df7fb3c8036ce

    • Size

      1024B

    • MD5

      6873757db85d559df13df7fb3c8036ce

    • SHA1

      a4003eee5b7cab8584d595b6d464ae77c55b1ea4

    • SHA256

      fe1a2bdbf8bdbd4443e85e8a25589b8fe684291ad4935742c93e57b1e1de1518

    • SHA512

      8292783c85df47a8a1872f25cd459570e20211f2c4841adf8bc3477e10607ccc6cd56a33408dcb18e87fd85a97efa0d9ee0fdec88aaf01a27e16b701ea2b5956

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks