metasploit | 555f50d56ed1209e35601571768e92799b33a412ba9d5df02d9865f1423160d3 | Triage

Sharing

General

Target

e3ad615a55914a31d444ff433abec739_JaffaCakes118
Size

72KB
Sample

240916-ax2ytazepa
MD5

e3ad615a55914a31d444ff433abec739
SHA1

7cb8310fe08b30e3a83dbb6e287d6b8f2512f333
SHA256

555f50d56ed1209e35601571768e92799b33a412ba9d5df02d9865f1423160d3
SHA512

416b81618590f324a7983872cdbf88fba220c40a9077dc30abd4a9f3cb881c25d382b771d2abeabc9d4e642e8b48076ad50cf894b8e5195b75cf265e649cf8f2
SSDEEP

1536:INMgVnqspt/LKWMfYNbhCQSLsLDMb+KR0Nc8QsJq39:xgVnqSLMQ8QLDe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.211:16912

Targets

- Target
  
  e3ad615a55914a31d444ff433abec739_JaffaCakes118
- Size
  
  72KB
- MD5
  
  e3ad615a55914a31d444ff433abec739
- SHA1
  
  7cb8310fe08b30e3a83dbb6e287d6b8f2512f333
- SHA256
  
  555f50d56ed1209e35601571768e92799b33a412ba9d5df02d9865f1423160d3
- SHA512
  
  416b81618590f324a7983872cdbf88fba220c40a9077dc30abd4a9f3cb881c25d382b771d2abeabc9d4e642e8b48076ad50cf894b8e5195b75cf265e649cf8f2
- SSDEEP
  
  1536:INMgVnqspt/LKWMfYNbhCQSLsLDMb+KR0Nc8QsJq39:xgVnqSLMQ8QLDe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan