metasploit | dc919f3ae30357af3740bb14ad6e3586108cc6f5cf5f0572527a7e884efa61ad | Triage

Sharing

General

Target

f28e8ffa1cb180c7bbc6b120c436499e_JaffaCakes118
Size

112KB
Sample

240416-dq2agsga74
MD5

f28e8ffa1cb180c7bbc6b120c436499e
SHA1

1d510bc25af71d1c09dee9e2db12cf066d889c10
SHA256

dc919f3ae30357af3740bb14ad6e3586108cc6f5cf5f0572527a7e884efa61ad
SHA512

02ced12484cf02cfed7a77bc0499c5252d8eedab04568bd6b3dd84697f3455d9fbd56920297eb970d44289baf4dad8b437ff5a4e0f0677383611310f4a03b13d
SSDEEP

1536:Rot1Ka7EdD22zJDcPOE1nzEkrkFmfte7fgcwx7N9kpFIKvBiDApQcWOyfJroPv26:RMf7KaUDcWE9InIkhFKdoXbBsc

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

220.220.10.3:443

Targets

- Target
  
  f28e8ffa1cb180c7bbc6b120c436499e_JaffaCakes118
- Size
  
  112KB
- MD5
  
  f28e8ffa1cb180c7bbc6b120c436499e
- SHA1
  
  1d510bc25af71d1c09dee9e2db12cf066d889c10
- SHA256
  
  dc919f3ae30357af3740bb14ad6e3586108cc6f5cf5f0572527a7e884efa61ad
- SHA512
  
  02ced12484cf02cfed7a77bc0499c5252d8eedab04568bd6b3dd84697f3455d9fbd56920297eb970d44289baf4dad8b437ff5a4e0f0677383611310f4a03b13d
- SSDEEP
  
  1536:Rot1Ka7EdD22zJDcPOE1nzEkrkFmfte7fgcwx7N9kpFIKvBiDApQcWOyfJroPv26:RMf7KaUDcWE9InIkhFKdoXbBsc
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan