metasploit | c30a0e9579486be2a558a1637e22ea76caf53baf61e362458217fc0944064fb4 | Triage

Sharing

General

Target

d6450b4c03f021b1c4a5c9af2b8e8915_JaffaCakes118
Size

72KB
Sample

240909-n7fefswhll
MD5

d6450b4c03f021b1c4a5c9af2b8e8915
SHA1

e12d5ba5ab11c66a4cd6936bfff3b6fbacb98188
SHA256

c30a0e9579486be2a558a1637e22ea76caf53baf61e362458217fc0944064fb4
SHA512

a9623d5a30c05ed344dbc02399a17475e08d7abaaa1821422dc23dd09297de4a6aaf156c2088e17d9aadf0c5e29e41e129564e65801eb116b1ca02ac4d7478a3
SSDEEP

1536:IuoXbiinxsc+SSQ5VsEGI7xQ6dbm05H7+Mb+KR0Nc8QsJq39:Griin2c+Sb55h7XEU6e0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.142.130:4444

Targets

- Target
  
  d6450b4c03f021b1c4a5c9af2b8e8915_JaffaCakes118
- Size
  
  72KB
- MD5
  
  d6450b4c03f021b1c4a5c9af2b8e8915
- SHA1
  
  e12d5ba5ab11c66a4cd6936bfff3b6fbacb98188
- SHA256
  
  c30a0e9579486be2a558a1637e22ea76caf53baf61e362458217fc0944064fb4
- SHA512
  
  a9623d5a30c05ed344dbc02399a17475e08d7abaaa1821422dc23dd09297de4a6aaf156c2088e17d9aadf0c5e29e41e129564e65801eb116b1ca02ac4d7478a3
- SSDEEP
  
  1536:IuoXbiinxsc+SSQ5VsEGI7xQ6dbm05H7+Mb+KR0Nc8QsJq39:Griin2c+Sb55h7XEU6e0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan