metasploit

General

Target

ed0d4a125a184d3a4bf9fa77a1644d58_JaffaCakes118
Size

72KB
Sample

240920-hmfltstdng
MD5

ed0d4a125a184d3a4bf9fa77a1644d58
SHA1

c7984e13f90ed46028a5d3df30372c55aaa4cdf9
SHA256

8b59d7152a61d9be659b49160074922e8cfbe1d7019b76596a5b3ea0845641cf
SHA512

d5e7c370abe4175d00dd8eca363977b2e02937cb4b51a93742dfc36ca901f3607218fed19576e137f40f8c835cb05416955a5a62c4ac7137681db8d33f678d86
SSDEEP

1536:IL2W7FZXmnVEz6FaLUBzD+nVGSesMb+KR0Nc8QsJq39:wFwnqsh6nVG3se0Nc8QsC9

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://172.31.36.46:443/5XCx4Gi78gsgBSEEe-CxIwbFrpfljs1LWFCqNTIo0X3YWigs_G37_PG9Q7KsVVkmmRlNWuEHSnbLiPkYwC_JH7ol9CaZcAz_letSPwAPHW_44qFW94GY0Chod998lDFv3Oxf4KxBN6KI9t36sfmKiWqWXuF6DCHS4pwwVQM2LeDDAPgw8--Rwj-qLbhqxEpzcPhTWHqfEyrdGwvmb5ssKNDqKyjKYtyjU3YgWuDcGnZxlKhzKXGvyJDL

Targets

- Target
  
  ed0d4a125a184d3a4bf9fa77a1644d58_JaffaCakes118
- Size
  
  72KB
- MD5
  
  ed0d4a125a184d3a4bf9fa77a1644d58
- SHA1
  
  c7984e13f90ed46028a5d3df30372c55aaa4cdf9
- SHA256
  
  8b59d7152a61d9be659b49160074922e8cfbe1d7019b76596a5b3ea0845641cf
- SHA512
  
  d5e7c370abe4175d00dd8eca363977b2e02937cb4b51a93742dfc36ca901f3607218fed19576e137f40f8c835cb05416955a5a62c4ac7137681db8d33f678d86
- SSDEEP
  
  1536:IL2W7FZXmnVEz6FaLUBzD+nVGSesMb+KR0Nc8QsJq39:wFwnqsh6nVG3se0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2