metasploit | 4ca3a0697bbdf2d886b0146492e90f2b3d1bd5d9572e6176f705e3a54be53bf9 | Triage

Sharing

General

Target

dc467f839292142855c448f6c56e631a_JaffaCakes118
Size

72KB
Sample

240912-pdlvtavbkm
MD5

dc467f839292142855c448f6c56e631a
SHA1

43adca1aa5d96cbbc479bba807a86e1ba8c5ca21
SHA256

4ca3a0697bbdf2d886b0146492e90f2b3d1bd5d9572e6176f705e3a54be53bf9
SHA512

a65ab5e17fd6d9ecea692a045ae9259285028768b2ab6af9de413e3935d4ef288f9abf443636a78d1ce68b93bc779b34b6e0b83c73a00c30bbc1d11a8ebb3617
SSDEEP

1536:I2ZLRCptme745rcoMu0pMb+KR0Nc8QsJq39:TZdECpX0pe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.0.0.3:4444

Targets

- Target
  
  dc467f839292142855c448f6c56e631a_JaffaCakes118
- Size
  
  72KB
- MD5
  
  dc467f839292142855c448f6c56e631a
- SHA1
  
  43adca1aa5d96cbbc479bba807a86e1ba8c5ca21
- SHA256
  
  4ca3a0697bbdf2d886b0146492e90f2b3d1bd5d9572e6176f705e3a54be53bf9
- SHA512
  
  a65ab5e17fd6d9ecea692a045ae9259285028768b2ab6af9de413e3935d4ef288f9abf443636a78d1ce68b93bc779b34b6e0b83c73a00c30bbc1d11a8ebb3617
- SSDEEP
  
  1536:I2ZLRCptme745rcoMu0pMb+KR0Nc8QsJq39:TZdECpX0pe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan