metasploit | c2a3859cd2f09bdf48948c7d8404012f8233dd51cd4cf5dcf285d1603dafbd6f | Triage

Sharing

General

Target

edf91e1b5e8b397377683d12d9c5151e_JaffaCakes118
Size

320KB
Sample

240920-tr7fwsvhnb
MD5

edf91e1b5e8b397377683d12d9c5151e
SHA1

b24141676dfda9d4d6bc31c0c628c21e8a2269b5
SHA256

c2a3859cd2f09bdf48948c7d8404012f8233dd51cd4cf5dcf285d1603dafbd6f
SHA512

702d59aad965c5280aaa2afe42cd5faee89edde6937483f1c461d00a3759f7e9dd29de1f4a6dd654d994efe4a9427a0140124d3fdeb75cead9896a27692a172e
SSDEEP

6144:G7XEB4DnCxd/gXVRIixzVQob90rK/jRfgUgmx+uEY0gjtK1D5X:G7UBynCxBgQ6p0GfgUufY0EwD5X

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

92.253.102.95:4444

Targets

- Target
  
  edf91e1b5e8b397377683d12d9c5151e_JaffaCakes118
- Size
  
  320KB
- MD5
  
  edf91e1b5e8b397377683d12d9c5151e
- SHA1
  
  b24141676dfda9d4d6bc31c0c628c21e8a2269b5
- SHA256
  
  c2a3859cd2f09bdf48948c7d8404012f8233dd51cd4cf5dcf285d1603dafbd6f
- SHA512
  
  702d59aad965c5280aaa2afe42cd5faee89edde6937483f1c461d00a3759f7e9dd29de1f4a6dd654d994efe4a9427a0140124d3fdeb75cead9896a27692a172e
- SSDEEP
  
  6144:G7XEB4DnCxd/gXVRIixzVQob90rK/jRfgUgmx+uEY0gjtK1D5X:G7UBynCxBgQ6p0GfgUufY0EwD5X
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan