metasploit | d5dc608b0ba639c09e882ac15f5c398abdfdd687e6758b3754e47f3ba6fd417c | Triage

Sharing

General

Target

e47a5a39f1071e6bb1bfdb3b59f66bee_JaffaCakes118
Size

72KB
Sample

240916-lgcjrszfpd
MD5

e47a5a39f1071e6bb1bfdb3b59f66bee
SHA1

cb4720034328253cda301af173092ce3bffd79f1
SHA256

d5dc608b0ba639c09e882ac15f5c398abdfdd687e6758b3754e47f3ba6fd417c
SHA512

cbd164fcf18dbea8eb3235e2ee8455552514d34b0f260cf466250781bc0ea3f402f96a5cd778fd739185fce7e25941192b1c75e543022a3c4c98864bfd37773a
SSDEEP

1536:ICPYjCZHG7xyUZfeuEAMb+KR0Nc8QsJq39:7AjwHMf7e0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.4:4444

Targets

- Target
  
  e47a5a39f1071e6bb1bfdb3b59f66bee_JaffaCakes118
- Size
  
  72KB
- MD5
  
  e47a5a39f1071e6bb1bfdb3b59f66bee
- SHA1
  
  cb4720034328253cda301af173092ce3bffd79f1
- SHA256
  
  d5dc608b0ba639c09e882ac15f5c398abdfdd687e6758b3754e47f3ba6fd417c
- SHA512
  
  cbd164fcf18dbea8eb3235e2ee8455552514d34b0f260cf466250781bc0ea3f402f96a5cd778fd739185fce7e25941192b1c75e543022a3c4c98864bfd37773a
- SSDEEP
  
  1536:ICPYjCZHG7xyUZfeuEAMb+KR0Nc8QsJq39:7AjwHMf7e0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan