metasploit | e8a1b6edd7997d803abbc4bcf267be2cd9e6f9be70bf764ae9238fa671f752c4 | Triage

Sharing

General

Target

e0c02ae0cccf48f1cff525506171725c_JaffaCakes118
Size

469KB
Sample

240914-wtvk8aybmb
MD5

e0c02ae0cccf48f1cff525506171725c
SHA1

a0871c27d7ce24e0e344bb3fdb0e901325a6b38f
SHA256

e8a1b6edd7997d803abbc4bcf267be2cd9e6f9be70bf764ae9238fa671f752c4
SHA512

60225756e3d83d25480fff9496940c429cf63d091270e192366a14a0b9d856cec485d290d55e3f3c2269c7fdc75033d12ed55a0a9c78961d1081b215ac13a929
SSDEEP

12288:EKKkA67lEaidc9FIG5suhrL0pSL2HS3QUx66hZ:EdFgzHFIG53hrL0ALfNVZ

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  
  e0c02ae0cccf48f1cff525506171725c_JaffaCakes118
- Size
  
  469KB
- MD5
  
  e0c02ae0cccf48f1cff525506171725c
- SHA1
  
  a0871c27d7ce24e0e344bb3fdb0e901325a6b38f
- SHA256
  
  e8a1b6edd7997d803abbc4bcf267be2cd9e6f9be70bf764ae9238fa671f752c4
- SHA512
  
  60225756e3d83d25480fff9496940c429cf63d091270e192366a14a0b9d856cec485d290d55e3f3c2269c7fdc75033d12ed55a0a9c78961d1081b215ac13a929
- SSDEEP
  
  12288:EKKkA67lEaidc9FIG5suhrL0pSL2HS3QUx66hZ:EdFgzHFIG53hrL0ALfNVZ
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan