General
-
Target
JaffaCakes118_6a51fe28cecad21a47e408009dfe10e0
-
Size
72KB
-
Sample
250103-fectvsznbt
-
MD5
6a51fe28cecad21a47e408009dfe10e0
-
SHA1
8731d0e3e7837f5be5db057e110aaabc99bd670c
-
SHA256
66925f9fd0bb8ab71455b693758fadbf1ee4dd30c9b3400e2b1bbf6c4189da75
-
SHA512
c932e1f77f05f031d25c0550180db5d59aaa381bd9547087012db3c1c0bf91a6ac25b21d92d295e23a4d2161fa6433ee5fde63e43db7b8a4f933719d52781385
-
SSDEEP
1536:IVoUs1uw2OyPXM2l7PKgKFM6IWb/IB6b3PMb+KR0Nc8QsJq39:zUsLsPX/lCEWbwUb3Pe0Nc8QsC9
Behavioral task
behavioral1
Sample
JaffaCakes118_6a51fe28cecad21a47e408009dfe10e0.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6a51fe28cecad21a47e408009dfe10e0.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/reverse_http
http://10.254.12.107:8440/-0NrX69PY7HJU8hSnM0xgAbqAPrVh0ludFP8hBnYZnCLIk16SretB4kKpXxqV3mRx7MmCD6cntHT8OXNaXzg9j-ZI4_v17W-HHGEn3FH6xHdevwBh-aZg-zvQztfDy308BRTHieX_lgYzmk6FExxfvTYgZVDYjF4RHCG4llqLiwXWRpAbTUqg62clZpNw2YQf1P9XtYRivbuuHNnWDweBQh3op6m
Targets
-
-
Target
JaffaCakes118_6a51fe28cecad21a47e408009dfe10e0
-
Size
72KB
-
MD5
6a51fe28cecad21a47e408009dfe10e0
-
SHA1
8731d0e3e7837f5be5db057e110aaabc99bd670c
-
SHA256
66925f9fd0bb8ab71455b693758fadbf1ee4dd30c9b3400e2b1bbf6c4189da75
-
SHA512
c932e1f77f05f031d25c0550180db5d59aaa381bd9547087012db3c1c0bf91a6ac25b21d92d295e23a4d2161fa6433ee5fde63e43db7b8a4f933719d52781385
-
SSDEEP
1536:IVoUs1uw2OyPXM2l7PKgKFM6IWb/IB6b3PMb+KR0Nc8QsJq39:zUsLsPX/lCEWbwUb3Pe0Nc8QsC9
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-