General

  • Target

    JaffaCakes118_03fa36c662c4b4e85b39c12f091c3577

  • Size

    23KB

  • Sample

    250121-mrhn7sznak

  • MD5

    03fa36c662c4b4e85b39c12f091c3577

  • SHA1

    9cc27e5a6650f27fe1aed51af6828bc8512af546

  • SHA256

    a53149f0ab6b39a076759dd92c681630ae0f758514a97918cc2abd11003874bf

  • SHA512

    20e5f4e1a1357c7f111acc926d3baef7e482c1853591e80df68d8a0ed3a609edaa0b6433a7dbe75451ff56208faa0fac129f614b16cc0f15811069a176993bb0

  • SSDEEP

    384:0fmq9E0UGLhYfhpdkK5Rt1s0XuwRyXDs+y9dzTTy8Qr5S7X4wy1NKFdZlujvBK19:0B20UGyfhpdp5Rt1HuwR4mbUjwyoZE7P

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.233:4444

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      JaffaCakes118_03fa36c662c4b4e85b39c12f091c3577

    • Size

      23KB

    • MD5

      03fa36c662c4b4e85b39c12f091c3577

    • SHA1

      9cc27e5a6650f27fe1aed51af6828bc8512af546

    • SHA256

      a53149f0ab6b39a076759dd92c681630ae0f758514a97918cc2abd11003874bf

    • SHA512

      20e5f4e1a1357c7f111acc926d3baef7e482c1853591e80df68d8a0ed3a609edaa0b6433a7dbe75451ff56208faa0fac129f614b16cc0f15811069a176993bb0

    • SSDEEP

      384:0fmq9E0UGLhYfhpdkK5Rt1s0XuwRyXDs+y9dzTTy8Qr5S7X4wy1NKFdZlujvBK19:0B20UGyfhpdp5Rt1HuwR4mbUjwyoZE7P

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks