metasploit | 5ed907dbad20604899e87d9da0e41f1a3e87cba9d93533f736d0ef9f28639340 | Triage

Sharing

General

Target

18a78b322bcc7dfabb02811cadea7967_JaffaCakes118
Size

1.7MB
Sample

240329-fa43jsaf63
MD5

18a78b322bcc7dfabb02811cadea7967
SHA1

013621a68d0875e1c9c94745a8b945542eb2cf3d
SHA256

5ed907dbad20604899e87d9da0e41f1a3e87cba9d93533f736d0ef9f28639340
SHA512

1c74ede15f601b4a23da73585650f855a9aa704801a6eedf2c13b4c4d407e0420ccdcfad01d09856ba999bbebc5c7434913ce56195393b673d46d3ab067e7f8c
SSDEEP

49152:jG8+5WGKZrb/TMvO90dL3BmAFd4A64nsfJUM/gTR55Ib7gz1:jG5uGvP

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

127.0.0.1:444

Targets

- Target
  
  18a78b322bcc7dfabb02811cadea7967_JaffaCakes118
- Size
  
  1.7MB
- MD5
  
  18a78b322bcc7dfabb02811cadea7967
- SHA1
  
  013621a68d0875e1c9c94745a8b945542eb2cf3d
- SHA256
  
  5ed907dbad20604899e87d9da0e41f1a3e87cba9d93533f736d0ef9f28639340
- SHA512
  
  1c74ede15f601b4a23da73585650f855a9aa704801a6eedf2c13b4c4d407e0420ccdcfad01d09856ba999bbebc5c7434913ce56195393b673d46d3ab067e7f8c
- SSDEEP
  
  49152:jG8+5WGKZrb/TMvO90dL3BmAFd4A64nsfJUM/gTR55Ib7gz1:jG5uGvP
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan