metasploit | 0b373b063ed7dfcb59cb97342f72a4dadc63c63a59121ebe29deb2aaec664ead | Triage

Sharing

General

Target

957a08b0ca6d9491f5abd3ebdcbb341a_JaffaCakes118
Size

205KB
Sample

240814-k894nsygmk
MD5

957a08b0ca6d9491f5abd3ebdcbb341a
SHA1

aaf1aa28a55ca8e6f100843e2507c1791acb55a2
SHA256

0b373b063ed7dfcb59cb97342f72a4dadc63c63a59121ebe29deb2aaec664ead
SHA512

fa90c16dd3c3a1dfb2252f22de71244301b9fc2b5982ab0a12c47343cc92e9154d07e673ccf3e7c617769bf044cb54befef73dc8275046288b9a720b657e6fa3
SSDEEP

6144:0s++U9jdmVnVFr19LSwEFheslax8oaQ2J1:0sLURw1lEWsw8oaF

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.16.44.100:666

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  
  957a08b0ca6d9491f5abd3ebdcbb341a_JaffaCakes118
- Size
  
  205KB
- MD5
  
  957a08b0ca6d9491f5abd3ebdcbb341a
- SHA1
  
  aaf1aa28a55ca8e6f100843e2507c1791acb55a2
- SHA256
  
  0b373b063ed7dfcb59cb97342f72a4dadc63c63a59121ebe29deb2aaec664ead
- SHA512
  
  fa90c16dd3c3a1dfb2252f22de71244301b9fc2b5982ab0a12c47343cc92e9154d07e673ccf3e7c617769bf044cb54befef73dc8275046288b9a720b657e6fa3
- SSDEEP
  
  6144:0s++U9jdmVnVFr19LSwEFheslax8oaQ2J1:0sLURw1lEWsw8oaF
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan