metasploit | c72c10a54797600a55756df5bf35b08e9f1b8b02526e53aa5d898cfc458862b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc8e2219b2584ccedf7a892cc398fa98_JaffaCakes118
Size

46KB
Sample

240823-veee1sydnr
MD5

bc8e2219b2584ccedf7a892cc398fa98
SHA1

a815fd416ff04e3a8901a259bd97d2021318e80e
SHA256

c72c10a54797600a55756df5bf35b08e9f1b8b02526e53aa5d898cfc458862b9
SHA512

f543b9f90a781eefaef219e2e08dc101224b24c18d85d3ac2b10debffc626b266a4851b21ce6ec644b85b3df9529388fab4c6d1ec29ba32ef8ab7360c1eb933f
SSDEEP

768:Ikc3y08DdFa/zm7rXWFf6v4g1pE1gX0dHSo/pHsi27BgzJVnOER+rlID/nLHRjyS:Imd6y/WFix1pSbdHSEsi2dgVOERAIDzl

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.147.132:443

Targets

- Target
  
  bc8e2219b2584ccedf7a892cc398fa98_JaffaCakes118
- Size
  
  46KB
- MD5
  
  bc8e2219b2584ccedf7a892cc398fa98
- SHA1
  
  a815fd416ff04e3a8901a259bd97d2021318e80e
- SHA256
  
  c72c10a54797600a55756df5bf35b08e9f1b8b02526e53aa5d898cfc458862b9
- SHA512
  
  f543b9f90a781eefaef219e2e08dc101224b24c18d85d3ac2b10debffc626b266a4851b21ce6ec644b85b3df9529388fab4c6d1ec29ba32ef8ab7360c1eb933f
- SSDEEP
  
  768:Ikc3y08DdFa/zm7rXWFf6v4g1pE1gX0dHSo/pHsi27BgzJVnOER+rlID/nLHRjyS:Imd6y/WFix1pSbdHSEsi2dgVOERAIDzl
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan