Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
03/01/2025, 15:18
General
-
Target
JaffaCakes118_6d91c5b19d31883725b04712ae31f490.exe
-
Size
72KB
-
MD5
6d91c5b19d31883725b04712ae31f490
-
SHA1
6e7af175c87b59a4164435020a0a9481839d3c7e
-
SHA256
0d81bacd70a1bee5ce6deaad6c5a94293987f514933e03c64c1c67302b8f17d9
-
SHA512
ea9da95963ea2947d7ef42b247b1d3e7b28969bb36acf896ffdac17ad06f63e716f9d2f3d42dc751b45a42a19f2fb737922b7faf81da59dd72ab5c24db57783e
-
SSDEEP
1536:InbpduSmQ1WU5YKnLT6cpjB4dIotVlZsMb+KR0Nc8QsJq39:GbbuSmXOByzZse0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.1.8:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6d91c5b19d31883725b04712ae31f490.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6d91c5b19d31883725b04712ae31f490.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB