metasploit | 4ea991d498b22ccf58830b99fd01db539b4ba84f7fe5e5d9170ab102ff78fad1 | Triage

Sharing

General

Target

7f228ff326c411367eecb4546017488d_JaffaCakes118
Size

422KB
Sample

240529-b9xqasdf7z
MD5

7f228ff326c411367eecb4546017488d
SHA1

210a6d627306cafb33dc4a38e397797574a6de50
SHA256

4ea991d498b22ccf58830b99fd01db539b4ba84f7fe5e5d9170ab102ff78fad1
SHA512

be486e9e808bf7b92ceb2f67e4c963bbb46acd73e4429f113a3caa8d5efbcd57faeb73c9e74e75325e4db94dccb36896fed16f656aa7c96ca17f9afd04a13b5c
SSDEEP

12288:0YCZ7HwHkW7qhDQEboh5evbxuPX38aQr1M:0ZbobAMm

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

47.116.128.244:5331

Targets

- Target
  
  7f228ff326c411367eecb4546017488d_JaffaCakes118
- Size
  
  422KB
- MD5
  
  7f228ff326c411367eecb4546017488d
- SHA1
  
  210a6d627306cafb33dc4a38e397797574a6de50
- SHA256
  
  4ea991d498b22ccf58830b99fd01db539b4ba84f7fe5e5d9170ab102ff78fad1
- SHA512
  
  be486e9e808bf7b92ceb2f67e4c963bbb46acd73e4429f113a3caa8d5efbcd57faeb73c9e74e75325e4db94dccb36896fed16f656aa7c96ca17f9afd04a13b5c
- SSDEEP
  
  12288:0YCZ7HwHkW7qhDQEboh5evbxuPX38aQr1M:0ZbobAMm
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan