metasploit | 245250a35be8ac45529a228f56fd54aeeac5d32df33c671ad431013e310429d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfb084bd6b42453471227fd87808c3de_JaffaCakes118
Size

217KB
Sample

240914-hlyq1ssamh
MD5

dfb084bd6b42453471227fd87808c3de
SHA1

de85b2e6b9dd04577f459d444f71e43bb23c7481
SHA256

245250a35be8ac45529a228f56fd54aeeac5d32df33c671ad431013e310429d1
SHA512

d764c9401e82404b5709fd1065fe78c50403a5e2f835cbbcf177734baf945e0f4bb99c80cb77ba71286bc193d837f4b07660a7f13aea4525b914dda3c44873cf
SSDEEP

6144:QtO231xifPVwG3zmI9kFxHzRyZtaKMlPm9MUIIcfuQ5N:g31mCG3zmmeia3w9efuQ5N

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.153.140:443

Targets

- Target
  
  dfb084bd6b42453471227fd87808c3de_JaffaCakes118
- Size
  
  217KB
- MD5
  
  dfb084bd6b42453471227fd87808c3de
- SHA1
  
  de85b2e6b9dd04577f459d444f71e43bb23c7481
- SHA256
  
  245250a35be8ac45529a228f56fd54aeeac5d32df33c671ad431013e310429d1
- SHA512
  
  d764c9401e82404b5709fd1065fe78c50403a5e2f835cbbcf177734baf945e0f4bb99c80cb77ba71286bc193d837f4b07660a7f13aea4525b914dda3c44873cf
- SSDEEP
  
  6144:QtO231xifPVwG3zmI9kFxHzRyZtaKMlPm9MUIIcfuQ5N:g31mCG3zmmeia3w9efuQ5N
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan