Analysis
-
max time kernel
105s -
max time network
98s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
30/03/2025, 12:46
General
-
Target
JaffaCakes118_98b3d8921ae556ecf66122a3eb3ea272.exe
-
Size
112KB
-
MD5
98b3d8921ae556ecf66122a3eb3ea272
-
SHA1
fe1a4dce446d29abf146733656c8216fda89e295
-
SHA256
f2155abd560b97d12b3607969b1b5d19942689546b2f7e9f944c386f2700693e
-
SHA512
65034eccdbe4de466bd61a55ed9e0d3172194466c7c80b6927e0200ea16b6448b9eae8d32d96de87b2ac100ba71cbee466d2ccecc532a9ecf7b332c0fd78de29
-
SSDEEP
1536:XLRcUr6fWAkUqHHCqufAMtZq1GzM0GiirtnAtvnoPvLV6eBsCXKc:XFJUWm4iEkA1aM0GiqtGnoXL1BsC
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
10.10.10.10:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_98b3d8921ae556ecf66122a3eb3ea272.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_98b3d8921ae556ecf66122a3eb3ea272.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB