Analysis
-
max time kernel
128s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-01-2025 10:41
General
-
Target
JaffaCakes118_03fa36c662c4b4e85b39c12f091c3577.exe
-
Size
23KB
-
MD5
03fa36c662c4b4e85b39c12f091c3577
-
SHA1
9cc27e5a6650f27fe1aed51af6828bc8512af546
-
SHA256
a53149f0ab6b39a076759dd92c681630ae0f758514a97918cc2abd11003874bf
-
SHA512
20e5f4e1a1357c7f111acc926d3baef7e482c1853591e80df68d8a0ed3a609edaa0b6433a7dbe75451ff56208faa0fac129f614b16cc0f15811069a176993bb0
-
SSDEEP
384:0fmq9E0UGLhYfhpdkK5Rt1s0XuwRyXDs+y9dzTTy8Qr5S7X4wy1NKFdZlujvBK19:0B20UGyfhpdp5Rt1HuwR4mbUjwyoZE7P
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_03fa36c662c4b4e85b39c12f091c3577.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_03fa36c662c4b4e85b39c12f091c3577.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB