metasploit | de74e218f9c70c275923746112a672cf6ac9438083eb0b55afbc79645462364f | Triage

Sharing

General

Target

d97488bf1862a1a2643f87831689b374_JaffaCakes118
Size

4KB
Sample

240911-cxb4haygkh
MD5

d97488bf1862a1a2643f87831689b374
SHA1

5a263df57da17cd1a507f4a149ac5b5ca9a2facc
SHA256

de74e218f9c70c275923746112a672cf6ac9438083eb0b55afbc79645462364f
SHA512

1f66a83e495f2e0fef8ed6482fb6039d60eaa6987ffa960ccd2a773815e9b51838064c2ea20cacdbdf6f8ff7c36482c5059a35564161281444e4e77a2a97598d
SSDEEP

48:6piY7Pb59wWhxNC48aVjViTfmiFZjSzXNWWqHu/iq1lxrRP9W25frpOBBQ:wzteWhSVaV4FJSds+XftPI2FYLQ

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.4.25:31337

Targets

- Target
  
  d97488bf1862a1a2643f87831689b374_JaffaCakes118
- Size
  
  4KB
- MD5
  
  d97488bf1862a1a2643f87831689b374
- SHA1
  
  5a263df57da17cd1a507f4a149ac5b5ca9a2facc
- SHA256
  
  de74e218f9c70c275923746112a672cf6ac9438083eb0b55afbc79645462364f
- SHA512
  
  1f66a83e495f2e0fef8ed6482fb6039d60eaa6987ffa960ccd2a773815e9b51838064c2ea20cacdbdf6f8ff7c36482c5059a35564161281444e4e77a2a97598d
- SSDEEP
  
  48:6piY7Pb59wWhxNC48aVjViTfmiFZjSzXNWWqHu/iq1lxrRP9W25frpOBBQ:wzteWhSVaV4FJSds+XftPI2FYLQ
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan