metasploit | 1f194c1248ba60a994ac82abee22fc99cca1cabc48a4a1255eea1f9596fc4ddd | Triage

Sharing

General

Target

d8e58cd60966927360194bfa3973c664_JaffaCakes118
Size

37KB
Sample

240910-x5pd1ssckb
MD5

d8e58cd60966927360194bfa3973c664
SHA1

12510ebb9a810b2423ef167ae3fd69eec50dcbf9
SHA256

1f194c1248ba60a994ac82abee22fc99cca1cabc48a4a1255eea1f9596fc4ddd
SHA512

bc676416af489f555019a118ae413c217817820616ce293bd0323ba6b659e0311950865353372fcb308d83c4b8845e07075c2195c9c3552e09583b9a11e76eab
SSDEEP

768:qVAMfj2rgCUIf7aO7A5cqLANPfsKpQ6lRZ95x:s5ftakuwiPfXph5x

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

62.1.127.135:1981

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

- Target
  
  d8e58cd60966927360194bfa3973c664_JaffaCakes118
- Size
  
  37KB
- MD5
  
  d8e58cd60966927360194bfa3973c664
- SHA1
  
  12510ebb9a810b2423ef167ae3fd69eec50dcbf9
- SHA256
  
  1f194c1248ba60a994ac82abee22fc99cca1cabc48a4a1255eea1f9596fc4ddd
- SHA512
  
  bc676416af489f555019a118ae413c217817820616ce293bd0323ba6b659e0311950865353372fcb308d83c4b8845e07075c2195c9c3552e09583b9a11e76eab
- SSDEEP
  
  768:qVAMfj2rgCUIf7aO7A5cqLANPfsKpQ6lRZ95x:s5ftakuwiPfXph5x
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan