metasploit | 3fba760991136ed49a2738a209b52b017eb3ef333c00337148418c0e1a19ec67 | Triage

Sharing

General

Target

e36eaaca1f911bb48af19f68e2f17cf0_JaffaCakes118
Size

20KB
Sample

240915-1r2zqstgrd
MD5

e36eaaca1f911bb48af19f68e2f17cf0
SHA1

77332f37efbb1837c393e201140d61f303adcc63
SHA256

3fba760991136ed49a2738a209b52b017eb3ef333c00337148418c0e1a19ec67
SHA512

8d1dd4c2f4b7714e4219e8b24c3f520006d0596df4b48b39509c18598569646c2f7cb6c834ae06fbefe27ae2bf7fedc568006fc21433348f0bcf4a4bda14a6d4
SSDEEP

384:7EjIETDGipW/XP5GCjb8Nq3wrZ6ZR8A+rHtcBvwF:gjIETR+P5ZjbvArZ6ZLNk

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.131:4444

Targets

- Target
  
  e36eaaca1f911bb48af19f68e2f17cf0_JaffaCakes118
- Size
  
  20KB
- MD5
  
  e36eaaca1f911bb48af19f68e2f17cf0
- SHA1
  
  77332f37efbb1837c393e201140d61f303adcc63
- SHA256
  
  3fba760991136ed49a2738a209b52b017eb3ef333c00337148418c0e1a19ec67
- SHA512
  
  8d1dd4c2f4b7714e4219e8b24c3f520006d0596df4b48b39509c18598569646c2f7cb6c834ae06fbefe27ae2bf7fedc568006fc21433348f0bcf4a4bda14a6d4
- SSDEEP
  
  384:7EjIETDGipW/XP5GCjb8Nq3wrZ6ZR8A+rHtcBvwF:gjIETR+P5ZjbvArZ6ZLNk
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan