Analysis
-
max time kernel
105s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
27/03/2025, 10:50
General
-
Target
JaffaCakes118_89b379f3abcb3d93a39eb35b7b966a4e.exe
-
Size
37KB
-
MD5
89b379f3abcb3d93a39eb35b7b966a4e
-
SHA1
6c1f9efc538ef57879eb42fa149528d43f33607e
-
SHA256
79047e9029635c13f40ec2baa0dc99f9fb1804a86e21446d7d31df6a83224df1
-
SHA512
258ea7b8d8cd5ec560afcd24a77bee12e21be587ece2be0f3e2fe28c49c612cd9958dced3f5f5dcfd6f3de077d4fa230f5c9ac03fe3adc191874b4de724af500
-
SSDEEP
768:c5VAOSpSz2b8+1XUIOhRO70Kc0TNIMsKPs6lRZ95x:c3YIs8pqwn0JIMX7h5x
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
172.16.60.1:4768
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_89b379f3abcb3d93a39eb35b7b966a4e.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_89b379f3abcb3d93a39eb35b7b966a4e.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB