metasploit | 16c1f9adc2337207be8b0a0d1b8d73ec71c8694203ff1a7fc06804a607fc1e99 | Triage

Sharing

General

Target

e53a442333aed0280026aec1960c5585_JaffaCakes118
Size

72KB
Sample

240916-vn7sxszbrj
MD5

e53a442333aed0280026aec1960c5585
SHA1

07b801a99ec15bf79b8afc0753f3b3ff7571b466
SHA256

16c1f9adc2337207be8b0a0d1b8d73ec71c8694203ff1a7fc06804a607fc1e99
SHA512

3046c8933bec00015c8f4f3cd55275d091452cf6aa306389cf8dd9a6cd626100ff308505fddb67f2490578e1ee150915996ed53c325103d0bc35503a9587c3f5
SSDEEP

1536:IHKmsHZ4yxjVP9O2lywJze0RAjMb+KR0Nc8QsJq39:FFHayxjVI28wJ9we0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

115.242.157.71:5555

Targets

- Target
  
  e53a442333aed0280026aec1960c5585_JaffaCakes118
- Size
  
  72KB
- MD5
  
  e53a442333aed0280026aec1960c5585
- SHA1
  
  07b801a99ec15bf79b8afc0753f3b3ff7571b466
- SHA256
  
  16c1f9adc2337207be8b0a0d1b8d73ec71c8694203ff1a7fc06804a607fc1e99
- SHA512
  
  3046c8933bec00015c8f4f3cd55275d091452cf6aa306389cf8dd9a6cd626100ff308505fddb67f2490578e1ee150915996ed53c325103d0bc35503a9587c3f5
- SSDEEP
  
  1536:IHKmsHZ4yxjVP9O2lywJze0RAjMb+KR0Nc8QsJq39:FFHayxjVI28wJ9we0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan