Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/01/2025, 21:56

General

  • Target

    JaffaCakes118_6873757db85d559df13df7fb3c8036ce.exe

  • Size

    1024B

  • MD5

    6873757db85d559df13df7fb3c8036ce

  • SHA1

    a4003eee5b7cab8584d595b6d464ae77c55b1ea4

  • SHA256

    fe1a2bdbf8bdbd4443e85e8a25589b8fe684291ad4935742c93e57b1e1de1518

  • SHA512

    8292783c85df47a8a1872f25cd459570e20211f2c4841adf8bc3477e10607ccc6cd56a33408dcb18e87fd85a97efa0d9ee0fdec88aaf01a27e16b701ea2b5956

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.99:443

Signatures

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

  • Metasploit family

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6873757db85d559df13df7fb3c8036ce.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6873757db85d559df13df7fb3c8036ce.exe"
    1⤵
      PID:1088

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1088-0-0x00000000010B0000-0x00000000010B1138-memory.dmp

      Filesize

      4KB