metasploit | 16bed17dca085d3cb698525be27d5aef59fc454147062178ee3e6c730e53e140 | Triage

Sharing

General

Target

e304be079ed3d0b9c2545eabe087a11c_JaffaCakes118
Size

72KB
Sample

240915-v2f75avarb
MD5

e304be079ed3d0b9c2545eabe087a11c
SHA1

13a54271e4b35f1a897a53e8ad8152c3e36680bd
SHA256

16bed17dca085d3cb698525be27d5aef59fc454147062178ee3e6c730e53e140
SHA512

63af813407dceade33f889e86dcd91653e35cf44116fd24dcefd5dc8651c19f9c1f9f0dc46f4d36e6c2005d74ed86ade8d2bbca228661728419d525cc869b225
SSDEEP

1536:ILCqyi0I3cRjI2KQF5T1BiBxeYrMb+KR0Nc8QsJq39:uCqy/I3c9tvw5re0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

85.5.116.119:443

Targets

- Target
  
  e304be079ed3d0b9c2545eabe087a11c_JaffaCakes118
- Size
  
  72KB
- MD5
  
  e304be079ed3d0b9c2545eabe087a11c
- SHA1
  
  13a54271e4b35f1a897a53e8ad8152c3e36680bd
- SHA256
  
  16bed17dca085d3cb698525be27d5aef59fc454147062178ee3e6c730e53e140
- SHA512
  
  63af813407dceade33f889e86dcd91653e35cf44116fd24dcefd5dc8651c19f9c1f9f0dc46f4d36e6c2005d74ed86ade8d2bbca228661728419d525cc869b225
- SSDEEP
  
  1536:ILCqyi0I3cRjI2KQF5T1BiBxeYrMb+KR0Nc8QsJq39:uCqy/I3c9tvw5re0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan