metasploit | 2209ac09da78031d7bdcd91b05041e41a2dcbd0f2c842aa839ba3d18480e2c01 | Triage

Sharing

General

Target

4b3b4415e8aaea6546c3e956b4388aec_JaffaCakes118
Size

1.0MB
Sample

240331-dd39bada94
MD5

4b3b4415e8aaea6546c3e956b4388aec
SHA1

a9a41c7de1a242c2b1d0bade7ee4751bceeeff31
SHA256

2209ac09da78031d7bdcd91b05041e41a2dcbd0f2c842aa839ba3d18480e2c01
SHA512

9be3a342c989e2c8997cb1daed6c3a1dd7ae80f7f5169e6750d4e8ced026517adae5c3bf1b598f2bb1d495c8fd92d70184762293a63a6275a3ba6cb3914f0d8c
SSDEEP

12288:8GC8RLSeH1Quj+rHVLV+SXpq2a9xKLwSgSh2me6n74CK1:XzNmuj+rHVLVumgSh2RCK1

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://91.235.129.180:443/Sj6i

Targets

- Target
  
  4b3b4415e8aaea6546c3e956b4388aec_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  4b3b4415e8aaea6546c3e956b4388aec
- SHA1
  
  a9a41c7de1a242c2b1d0bade7ee4751bceeeff31
- SHA256
  
  2209ac09da78031d7bdcd91b05041e41a2dcbd0f2c842aa839ba3d18480e2c01
- SHA512
  
  9be3a342c989e2c8997cb1daed6c3a1dd7ae80f7f5169e6750d4e8ced026517adae5c3bf1b598f2bb1d495c8fd92d70184762293a63a6275a3ba6cb3914f0d8c
- SSDEEP
  
  12288:8GC8RLSeH1Quj+rHVLV+SXpq2a9xKLwSgSh2me6n74CK1:XzNmuj+rHVLVumgSh2RCK1
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan