metasploit | c953bd05205de1d6206789a0d0723371149fbda6d05c5df9f7792bc9a053c536 | Triage

Sharing

General

Target

e123533221de4869fe80ff4738d0fcac_JaffaCakes118
Size

27KB
Sample

240914-134mpszapp
MD5

e123533221de4869fe80ff4738d0fcac
SHA1

bee66fc60b469462e09a5d847080e9918cfa11cd
SHA256

c953bd05205de1d6206789a0d0723371149fbda6d05c5df9f7792bc9a053c536
SHA512

e7d4505ffa86ea9bc2a08c7af486056e77957a1691b5acc11183f6f3180dfaf88386f4b8d64e454bc3a58b8c0c8ba5189552ea3a5efe2734bb58609d4442813e
SSDEEP

768:Xq0ESwxfTv57ghuHiU85SdRpwDW5CxBz:a0ESCrWhzU82pw

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.11:7890

Targets

- Target
  
  e123533221de4869fe80ff4738d0fcac_JaffaCakes118
- Size
  
  27KB
- MD5
  
  e123533221de4869fe80ff4738d0fcac
- SHA1
  
  bee66fc60b469462e09a5d847080e9918cfa11cd
- SHA256
  
  c953bd05205de1d6206789a0d0723371149fbda6d05c5df9f7792bc9a053c536
- SHA512
  
  e7d4505ffa86ea9bc2a08c7af486056e77957a1691b5acc11183f6f3180dfaf88386f4b8d64e454bc3a58b8c0c8ba5189552ea3a5efe2734bb58609d4442813e
- SSDEEP
  
  768:Xq0ESwxfTv57ghuHiU85SdRpwDW5CxBz:a0ESCrWhzU82pw
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan