metasploit | 57b4564b334ae781927222ab3562ee06dfb4e11f76975d84ff7b5a8c6c2bf487 | Triage

Sharing

General

Target

ea7978bc13c406402f1ce15662aa2744_JaffaCakes118
Size

72KB
Sample

240919-dn4ylayapj
MD5

ea7978bc13c406402f1ce15662aa2744
SHA1

1cdc7358864d434682f9f944599d5aab3e7f5adb
SHA256

57b4564b334ae781927222ab3562ee06dfb4e11f76975d84ff7b5a8c6c2bf487
SHA512

cb08d1696a2241f487c682afff0ea85dab27364e434078550dce6b285655cdaff63725a192a98178819e24c9954a5ee855f0d42e0def564ab1ab573fbf03cd0b
SSDEEP

1536:I+T1RvX1lxZoPVLwY3GxFMb+KR0Nc8QsJq39:3HFBodLnGxFe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.10.9:4444

Targets

- Target
  
  ea7978bc13c406402f1ce15662aa2744_JaffaCakes118
- Size
  
  72KB
- MD5
  
  ea7978bc13c406402f1ce15662aa2744
- SHA1
  
  1cdc7358864d434682f9f944599d5aab3e7f5adb
- SHA256
  
  57b4564b334ae781927222ab3562ee06dfb4e11f76975d84ff7b5a8c6c2bf487
- SHA512
  
  cb08d1696a2241f487c682afff0ea85dab27364e434078550dce6b285655cdaff63725a192a98178819e24c9954a5ee855f0d42e0def564ab1ab573fbf03cd0b
- SSDEEP
  
  1536:I+T1RvX1lxZoPVLwY3GxFMb+KR0Nc8QsJq39:3HFBodLnGxFe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan