metasploit | 7c0f33262da62ff1754d16027bafde197f5ef45fc9341877e8a466567e440cbe | Triage

Sharing

General

Target

e8ca6d5a362897801fcdb0d303e9938b_JaffaCakes118
Size

12KB
Sample

240918-k9yf9stfjr
MD5

e8ca6d5a362897801fcdb0d303e9938b
SHA1

bdb9aadf6e419ae3463cd186ddc9f20623c593c2
SHA256

7c0f33262da62ff1754d16027bafde197f5ef45fc9341877e8a466567e440cbe
SHA512

a36fd349df478515441228918cd061f839ed1b3b1fba252a4dc482e2dda7e0542a1673e34092e45de45ca47ca264d3a54c1580ed9c1da7554e632305ce6f3aa5
SSDEEP

192:EJDgxMAHnay9Iaj8Um4FyLXtu06EE490TZv1CM0n:6EDnay9IOoxXtmBvwF

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.39:3222

Targets

- Target
  
  e8ca6d5a362897801fcdb0d303e9938b_JaffaCakes118
- Size
  
  12KB
- MD5
  
  e8ca6d5a362897801fcdb0d303e9938b
- SHA1
  
  bdb9aadf6e419ae3463cd186ddc9f20623c593c2
- SHA256
  
  7c0f33262da62ff1754d16027bafde197f5ef45fc9341877e8a466567e440cbe
- SHA512
  
  a36fd349df478515441228918cd061f839ed1b3b1fba252a4dc482e2dda7e0542a1673e34092e45de45ca47ca264d3a54c1580ed9c1da7554e632305ce6f3aa5
- SSDEEP
  
  192:EJDgxMAHnay9Iaj8Um4FyLXtu06EE490TZv1CM0n:6EDnay9IOoxXtmBvwF
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan