metasploit | d085afb656f664c6492355cc6bf3e6cf6f76420fbfeac21009baec2d19e987b1 | Triage

Sharing

General

Target

fe689f470ae3177a2f930e5522f916ba_JaffaCakes118
Size

1.7MB
Sample

240421-evjfxaah34
MD5

fe689f470ae3177a2f930e5522f916ba
SHA1

34f3d685fd737ad2dbf014778bae7fa3dd295225
SHA256

d085afb656f664c6492355cc6bf3e6cf6f76420fbfeac21009baec2d19e987b1
SHA512

d3406b1715ff82dbfeff953126903cb529bf4dee9e3f401d5fd85697d87adbbfe56feb0360a1fc81592f17ea10906f78c2dc11315534f955cb939f4fff9254a5
SSDEEP

24576:e4fXSohkQN+CeoJ2Gag+XxSTP0FscwM+n1Y1piSsGPYzIbC/liB0olLXU600phhi:XfXSoCQNeh/gIxST3pTY+SsG/tlLfhRo

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.89.128:6732

Targets

- Target
  
  fe689f470ae3177a2f930e5522f916ba_JaffaCakes118
- Size
  
  1.7MB
- MD5
  
  fe689f470ae3177a2f930e5522f916ba
- SHA1
  
  34f3d685fd737ad2dbf014778bae7fa3dd295225
- SHA256
  
  d085afb656f664c6492355cc6bf3e6cf6f76420fbfeac21009baec2d19e987b1
- SHA512
  
  d3406b1715ff82dbfeff953126903cb529bf4dee9e3f401d5fd85697d87adbbfe56feb0360a1fc81592f17ea10906f78c2dc11315534f955cb939f4fff9254a5
- SSDEEP
  
  24576:e4fXSohkQN+CeoJ2Gag+XxSTP0FscwM+n1Y1piSsGPYzIbC/liB0olLXU600phhi:XfXSoCQNeh/gIxST3pTY+SsG/tlLfhRo
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan