metasploit | 0a0afe36b69928952fdc8debf33a4cde047c9815b4d372cb7bfca140a9e1711a | Triage

Sharing

General

Target

ea4a6c960850e0a244bb98584ea0bca5_JaffaCakes118
Size

72KB
Sample

240919-a9gteascpg
MD5

ea4a6c960850e0a244bb98584ea0bca5
SHA1

d2b5bb6ee6a4e8703749c8827c80819024343817
SHA256

0a0afe36b69928952fdc8debf33a4cde047c9815b4d372cb7bfca140a9e1711a
SHA512

7ec7db1b39048a3c424c0f22143e1991c84560a23eb87f1a8ae7fdd7a278e855fdd28202329457ce036ff50f05e4a8df79e69786a4bcff53acea0145c8faa7d3
SSDEEP

1536:Pc/0+ytG4SPHNBxOzwcnwpGD9pdMN+eTlNc8Qs:U/0QPEzw3GN+lNc8Qs

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.106:4444

Targets

- Target
  
  ea4a6c960850e0a244bb98584ea0bca5_JaffaCakes118
- Size
  
  72KB
- MD5
  
  ea4a6c960850e0a244bb98584ea0bca5
- SHA1
  
  d2b5bb6ee6a4e8703749c8827c80819024343817
- SHA256
  
  0a0afe36b69928952fdc8debf33a4cde047c9815b4d372cb7bfca140a9e1711a
- SHA512
  
  7ec7db1b39048a3c424c0f22143e1991c84560a23eb87f1a8ae7fdd7a278e855fdd28202329457ce036ff50f05e4a8df79e69786a4bcff53acea0145c8faa7d3
- SSDEEP
  
  1536:Pc/0+ytG4SPHNBxOzwcnwpGD9pdMN+eTlNc8Qs:U/0QPEzw3GN+lNc8Qs
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan