metasploit | 4064c84b5cb89fc00ab87db848d86d4c8ae2964a11bf04cde5e8f58c07807b48 | Triage

Sharing

General

Target

eef6eeac676b521fa0a62d8492f7fb3d_JaffaCakes118
Size

37KB
Sample

240921-dpl46ssejp
MD5

eef6eeac676b521fa0a62d8492f7fb3d
SHA1

7d800a54ebc6d55a3a8fd60463b5a11bf2a5003e
SHA256

4064c84b5cb89fc00ab87db848d86d4c8ae2964a11bf04cde5e8f58c07807b48
SHA512

a544044f3ad5bc18b37e80a79b81dcf83cec614a2f327dbab9ba3631b5027ddc4eb050bfeb5bd6cacd5a9e44f2713a3465dcf3363b4be0350c1f765abec0d7c3
SSDEEP

768:eVATSM5622gifIqNRO7Ay+qAbNPMSNWT6lRZ95x:IV6+mkBbhPM0ph5x

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.131.131:4321

Targets

- Target
  
  eef6eeac676b521fa0a62d8492f7fb3d_JaffaCakes118
- Size
  
  37KB
- MD5
  
  eef6eeac676b521fa0a62d8492f7fb3d
- SHA1
  
  7d800a54ebc6d55a3a8fd60463b5a11bf2a5003e
- SHA256
  
  4064c84b5cb89fc00ab87db848d86d4c8ae2964a11bf04cde5e8f58c07807b48
- SHA512
  
  a544044f3ad5bc18b37e80a79b81dcf83cec614a2f327dbab9ba3631b5027ddc4eb050bfeb5bd6cacd5a9e44f2713a3465dcf3363b4be0350c1f765abec0d7c3
- SSDEEP
  
  768:eVATSM5622gifIqNRO7Ay+qAbNPMSNWT6lRZ95x:IV6+mkBbhPM0ph5x
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan