metasploit | c97bac56bee0184cf31eb3c89cb710c492a805142b26d7aeea121c7a94e7368d | Triage

Sharing

General

Target

dd995c060e3fe56c5a9a7a4c043ae4e5_JaffaCakes118
Size

218KB
Sample

240913-d9jjsasdkq
MD5

dd995c060e3fe56c5a9a7a4c043ae4e5
SHA1

e4e27f4ef6a33f0b91dc1d18a4a18b570f014c5d
SHA256

c97bac56bee0184cf31eb3c89cb710c492a805142b26d7aeea121c7a94e7368d
SHA512

2b7e54cdefea567d73ff3527fe76e48a9930c3c981603a170df9084fd398796644d7e054aae904f54b692deabb38835c43abff8b5697fa066505b1b1342544bf
SSDEEP

6144:vsM9IbMaMrjPtts8dE1gwxqCDiEEiEEsfByAwZZS4onQF6y:vsoIb+4821g0XIB7GjF6y

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.192.133:3333

Targets

- Target
  
  dd995c060e3fe56c5a9a7a4c043ae4e5_JaffaCakes118
- Size
  
  218KB
- MD5
  
  dd995c060e3fe56c5a9a7a4c043ae4e5
- SHA1
  
  e4e27f4ef6a33f0b91dc1d18a4a18b570f014c5d
- SHA256
  
  c97bac56bee0184cf31eb3c89cb710c492a805142b26d7aeea121c7a94e7368d
- SHA512
  
  2b7e54cdefea567d73ff3527fe76e48a9930c3c981603a170df9084fd398796644d7e054aae904f54b692deabb38835c43abff8b5697fa066505b1b1342544bf
- SSDEEP
  
  6144:vsM9IbMaMrjPtts8dE1gwxqCDiEEiEEsfByAwZZS4onQF6y:vsoIb+4821g0XIB7GjF6y
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan