metasploit | 20e3dac4b8545470a7d1ea73ce7ec5d6636d902857bd0c90d7a4706f03c791b6 | Triage

Sharing

General

Target

ff971a0b0bb5ca2d61f8534f4ccd3fa0_JaffaCakes118
Size

839KB
Sample

240421-svk7dseb49
MD5

ff971a0b0bb5ca2d61f8534f4ccd3fa0
SHA1

6397e55513b86a15e2c2e850f0088072ded48b9e
SHA256

20e3dac4b8545470a7d1ea73ce7ec5d6636d902857bd0c90d7a4706f03c791b6
SHA512

f2b7e2df1cba44f0f58ab796a347d27f02aef1c47097e38f9ecba2ed4d7ff495f67d3d3530a320bf9c36377c03631cda7c872e46fb018faff81d3eccab2c88cc
SSDEEP

12288:A/0r/VvpWmIbiituungRxcmxQPwZM+b9RmFpyZlkkujn73V:LNvpWmJREPwZM+b9CsZS

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.200.30.166:3333

Targets

- Target
  
  ff971a0b0bb5ca2d61f8534f4ccd3fa0_JaffaCakes118
- Size
  
  839KB
- MD5
  
  ff971a0b0bb5ca2d61f8534f4ccd3fa0
- SHA1
  
  6397e55513b86a15e2c2e850f0088072ded48b9e
- SHA256
  
  20e3dac4b8545470a7d1ea73ce7ec5d6636d902857bd0c90d7a4706f03c791b6
- SHA512
  
  f2b7e2df1cba44f0f58ab796a347d27f02aef1c47097e38f9ecba2ed4d7ff495f67d3d3530a320bf9c36377c03631cda7c872e46fb018faff81d3eccab2c88cc
- SSDEEP
  
  12288:A/0r/VvpWmIbiituungRxcmxQPwZM+b9RmFpyZlkkujn73V:LNvpWmJREPwZM+b9CsZS
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan