metasploit | 407fc090b6e29f9833c26dacc55159c63280840bb55eca55f165b56af5949dae | Triage

Sharing

General

Target

e7763b598880855fbba6f304ddd881de_JaffaCakes118
Size

72KB
Sample

240917-w9gz3aybrp
MD5

e7763b598880855fbba6f304ddd881de
SHA1

4b91ff36d1e05b82667eb95c3c40b1826924dd0b
SHA256

407fc090b6e29f9833c26dacc55159c63280840bb55eca55f165b56af5949dae
SHA512

a885d20bd3b6828b5be3bbbe609b4b5d9f7c52020a3ddb45d20a44964929f281d029aa1017bc1dde60574f17e3015c8d4d8af4a0c7a323d010cda71d84718b3b
SSDEEP

1536:Is9wN3DiQzBfPlMgUl0tPF6LuGDzy+UFaWrdMb+KR0Nc8QsJq39:f9CiQzBBUl0BIiFPe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.103:31337

Targets

- Target
  
  e7763b598880855fbba6f304ddd881de_JaffaCakes118
- Size
  
  72KB
- MD5
  
  e7763b598880855fbba6f304ddd881de
- SHA1
  
  4b91ff36d1e05b82667eb95c3c40b1826924dd0b
- SHA256
  
  407fc090b6e29f9833c26dacc55159c63280840bb55eca55f165b56af5949dae
- SHA512
  
  a885d20bd3b6828b5be3bbbe609b4b5d9f7c52020a3ddb45d20a44964929f281d029aa1017bc1dde60574f17e3015c8d4d8af4a0c7a323d010cda71d84718b3b
- SSDEEP
  
  1536:Is9wN3DiQzBfPlMgUl0tPF6LuGDzy+UFaWrdMb+KR0Nc8QsJq39:f9CiQzBBUl0BIiFPe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan