metasploit | e801eccac0c3262ea5f95cb3bf2cbe157a8a7c3d921627229c431d370f09efe8 | Triage

Sharing

General

Target

4d2a141d8d12c40c3ef93bcd03132f5b_JaffaCakes118
Size

650KB
Sample

240331-e5hx5adg7y
MD5

4d2a141d8d12c40c3ef93bcd03132f5b
SHA1

0d6a433e65173adc0bb1e2350c8c8d9e4a053fa2
SHA256

e801eccac0c3262ea5f95cb3bf2cbe157a8a7c3d921627229c431d370f09efe8
SHA512

44e34b2bd377c2369b6aed5ab4bec2ede2a78b43de37b25744240d8426d94c9702c267fb47350af6d762136731b31d17e62e7f19987de0dea895f30b5d93f842
SSDEEP

6144:jOnkXjbe1FerINZ12VGCn9tIk0zb2jNqLIrjKiRqQ3Q+sYUJdH:wMPvrgZEVG+92kNqSjKOg3zJdH

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.1.21:16000/A56WY

Targets

- Target
  
  4d2a141d8d12c40c3ef93bcd03132f5b_JaffaCakes118
- Size
  
  650KB
- MD5
  
  4d2a141d8d12c40c3ef93bcd03132f5b
- SHA1
  
  0d6a433e65173adc0bb1e2350c8c8d9e4a053fa2
- SHA256
  
  e801eccac0c3262ea5f95cb3bf2cbe157a8a7c3d921627229c431d370f09efe8
- SHA512
  
  44e34b2bd377c2369b6aed5ab4bec2ede2a78b43de37b25744240d8426d94c9702c267fb47350af6d762136731b31d17e62e7f19987de0dea895f30b5d93f842
- SSDEEP
  
  6144:jOnkXjbe1FerINZ12VGCn9tIk0zb2jNqLIrjKiRqQ3Q+sYUJdH:wMPvrgZEVG+92kNqSjKOg3zJdH
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan