metasploit | 8d2693c3b265730389a730f39dc71badba888bcd0c583e6fb6a3d95a5296940f | Triage

Sharing

General

Target

dcbf7dec6e2b6cd0ba9427d57e650b46_JaffaCakes118
Size

37KB
Sample

240912-wfnwhswemm
MD5

dcbf7dec6e2b6cd0ba9427d57e650b46
SHA1

fb51ba8dc25d59d71b9cdbbd56974a5ca67235b0
SHA256

8d2693c3b265730389a730f39dc71badba888bcd0c583e6fb6a3d95a5296940f
SHA512

00744f40cc4de2be6bb2e80454226cebb224a3721b752866aaf2aab36744bfb5cc4d0cfa394c7c89985e101377fbec222d15b7b61f72282dc6c3a8877a5bf867
SSDEEP

768:JVsBSMHj2lZCIUrrI7B5cqu6NPQ27S6lRZ95x:HnMKCSVuVoPQ2h5x

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

201.58.196.43:4444

Targets

- Target
  
  dcbf7dec6e2b6cd0ba9427d57e650b46_JaffaCakes118
- Size
  
  37KB
- MD5
  
  dcbf7dec6e2b6cd0ba9427d57e650b46
- SHA1
  
  fb51ba8dc25d59d71b9cdbbd56974a5ca67235b0
- SHA256
  
  8d2693c3b265730389a730f39dc71badba888bcd0c583e6fb6a3d95a5296940f
- SHA512
  
  00744f40cc4de2be6bb2e80454226cebb224a3721b752866aaf2aab36744bfb5cc4d0cfa394c7c89985e101377fbec222d15b7b61f72282dc6c3a8877a5bf867
- SSDEEP
  
  768:JVsBSMHj2lZCIUrrI7B5cqu6NPQ27S6lRZ95x:HnMKCSVuVoPQ2h5x
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan