metasploit | fdb7c5c4a2e40cb2412b4555918167cfcc60c69c176f112884bf523140da54c2 | Triage

Sharing

General

Target

d28e95b93fdcad0e46156cd4d39ef173_JaffaCakes118
Size

37KB
Sample

240907-wxmpsaxdrn
MD5

d28e95b93fdcad0e46156cd4d39ef173
SHA1

5bb94e047a1f7e1f8c6296cb0b695750361d4d25
SHA256

fdb7c5c4a2e40cb2412b4555918167cfcc60c69c176f112884bf523140da54c2
SHA512

aff3177af4f1de4a84add5192f1aa40bcad6930c5cf529f95767c75602769919027b5a48c54ecfcb3f0b298922c48782008409ea8fcd0a211976f531954eb9d6
SSDEEP

768:HVAaSMpb2rg+ZID2aYEA5cqZUF0NZW6KdQ6lRZ95x:1Myk7ru6UF2ZWlNh5x

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

197.1.60.167:4444

Targets

- Target
  
  d28e95b93fdcad0e46156cd4d39ef173_JaffaCakes118
- Size
  
  37KB
- MD5
  
  d28e95b93fdcad0e46156cd4d39ef173
- SHA1
  
  5bb94e047a1f7e1f8c6296cb0b695750361d4d25
- SHA256
  
  fdb7c5c4a2e40cb2412b4555918167cfcc60c69c176f112884bf523140da54c2
- SHA512
  
  aff3177af4f1de4a84add5192f1aa40bcad6930c5cf529f95767c75602769919027b5a48c54ecfcb3f0b298922c48782008409ea8fcd0a211976f531954eb9d6
- SSDEEP
  
  768:HVAaSMpb2rg+ZID2aYEA5cqZUF0NZW6KdQ6lRZ95x:1Myk7ru6UF2ZWlNh5x
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan