metasploit | 5a1b6ba31a73df0c1f71551294c87f75c280aac9656c0a7111a86a2a46c5ee86 | Triage

Sharing

General

Target

db9fdda88dcb015ce3c3ec21105dffce_JaffaCakes118
Size

293KB
Sample

240912-chn5hswapl
MD5

db9fdda88dcb015ce3c3ec21105dffce
SHA1

661649c547f91f23bdbf37f845f7adbe08df1b0c
SHA256

5a1b6ba31a73df0c1f71551294c87f75c280aac9656c0a7111a86a2a46c5ee86
SHA512

463f274cab9be18eb899832678db3d28f9319ce1596a24d83cb46fa70fb34fc69dd451ad92f6dcb0ce4adfc66b7258cae189824ecbaabdc6fd802101694cb1c5
SSDEEP

6144:JQeENx6Gh83MQqbyznRVDcPqKGJ7W6oTrIy67cKG:JTCb8NqbyncyKGK6owy6c

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://traca2.ath.cx:5050/AVfxC

Targets

- Target
  
  db9fdda88dcb015ce3c3ec21105dffce_JaffaCakes118
- Size
  
  293KB
- MD5
  
  db9fdda88dcb015ce3c3ec21105dffce
- SHA1
  
  661649c547f91f23bdbf37f845f7adbe08df1b0c
- SHA256
  
  5a1b6ba31a73df0c1f71551294c87f75c280aac9656c0a7111a86a2a46c5ee86
- SHA512
  
  463f274cab9be18eb899832678db3d28f9319ce1596a24d83cb46fa70fb34fc69dd451ad92f6dcb0ce4adfc66b7258cae189824ecbaabdc6fd802101694cb1c5
- SSDEEP
  
  6144:JQeENx6Gh83MQqbyznRVDcPqKGJ7W6oTrIy67cKG:JTCb8NqbyncyKGK6owy6c
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan