metasploit | 6cd20654fc250ac87991352b57036c4cd65845615d3e76ca708059036725ce84 | Triage

Sharing

General

Target

8db0d28d4e9ea59a9e915080a41870d6_JaffaCakes118
Size

1.1MB
Sample

240602-l2nsjahh41
MD5

8db0d28d4e9ea59a9e915080a41870d6
SHA1

bfd8e4d34b38e82739507030ae2d203a1506e83c
SHA256

6cd20654fc250ac87991352b57036c4cd65845615d3e76ca708059036725ce84
SHA512

c23cbb86f5838e698bf8b2933eb664ee70c64ae30494f740548618e91da517640f4c3da4c6ae94b66d3bb1dd7ececb8dab9bb82c6dba4ce7f443a37cc9463760
SSDEEP

24576:ZFk0Ju5C+6zMLNXeWvknzIsrejCwJkWBth/H:ZFHJun6QKnEPjCwS2h

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://live-dvb-c.youku.com:80/PFPv

Attributes

headers Accept: */* Host: b2.microsoft.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko

Targets

- Target
  
  8db0d28d4e9ea59a9e915080a41870d6_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  8db0d28d4e9ea59a9e915080a41870d6
- SHA1
  
  bfd8e4d34b38e82739507030ae2d203a1506e83c
- SHA256
  
  6cd20654fc250ac87991352b57036c4cd65845615d3e76ca708059036725ce84
- SHA512
  
  c23cbb86f5838e698bf8b2933eb664ee70c64ae30494f740548618e91da517640f4c3da4c6ae94b66d3bb1dd7ececb8dab9bb82c6dba4ce7f443a37cc9463760
- SSDEEP
  
  24576:ZFk0Ju5C+6zMLNXeWvknzIsrejCwJkWBth/H:ZFHJun6QKnEPjCwS2h
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan