metasploit | 4be5387f54a40f765ebc0883e5b67d67e7b92e718bda41f577b122bb7d4179de | Triage

Sharing

General

Target

e060f147c9aec7d93a8020c6064ad3ab_JaffaCakes118
Size

25KB
Sample

240914-rvpddaygrb
MD5

e060f147c9aec7d93a8020c6064ad3ab
SHA1

229b0957954944f919ac8a647492487f1936afa7
SHA256

4be5387f54a40f765ebc0883e5b67d67e7b92e718bda41f577b122bb7d4179de
SHA512

ed381f0b272516bce0529ebbf0ac5dd7a1da3afe947029d653778781e9fab38582893d73b50861fd69b63e4481b360b7f42a2a495887aca080603007a58c7259
SSDEEP

384:WCBHgWPkbXKxUVkOsKVG3GI0yej4dT+VI2GEvmW9ZrbWxOHZ2P:WCBLO6xUVkOs8G3HGj4OISPU

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.100:4444

Targets

- Target
  
  e060f147c9aec7d93a8020c6064ad3ab_JaffaCakes118
- Size
  
  25KB
- MD5
  
  e060f147c9aec7d93a8020c6064ad3ab
- SHA1
  
  229b0957954944f919ac8a647492487f1936afa7
- SHA256
  
  4be5387f54a40f765ebc0883e5b67d67e7b92e718bda41f577b122bb7d4179de
- SHA512
  
  ed381f0b272516bce0529ebbf0ac5dd7a1da3afe947029d653778781e9fab38582893d73b50861fd69b63e4481b360b7f42a2a495887aca080603007a58c7259
- SSDEEP
  
  384:WCBHgWPkbXKxUVkOsKVG3GI0yej4dT+VI2GEvmW9ZrbWxOHZ2P:WCBLO6xUVkOs8G3HGj4OISPU
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan