metasploit | 28205c880c248e83bd3f1192fb118fb26c5f734b5a980566c3e3165d4aa69ff0 | Triage

Sharing

General

Target

f20a7ae8b69ecf1b815a60ba0194fa6e_JaffaCakes118
Size

48KB
Sample

240922-pv75dazfqa
MD5

f20a7ae8b69ecf1b815a60ba0194fa6e
SHA1

1e973af2bb6f352b9d124983a7e097cd7f69eab8
SHA256

28205c880c248e83bd3f1192fb118fb26c5f734b5a980566c3e3165d4aa69ff0
SHA512

4fa179192c484df22e8cfd4c626faf89781eff0d4ff9fb9a9c66c9f7ffbfb810dda0b26c0bdc69d68aaa4bd6f7941ef9fb1d5b34134dc1fcfce24faf9d518977
SSDEEP

768:riOWDYPSCLyfS3gHWHocT9wuH5n/SMeIiolx4wle3:48KCLyfT2HXFaMeNok

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.136:4444

Targets

- Target
  
  f20a7ae8b69ecf1b815a60ba0194fa6e_JaffaCakes118
- Size
  
  48KB
- MD5
  
  f20a7ae8b69ecf1b815a60ba0194fa6e
- SHA1
  
  1e973af2bb6f352b9d124983a7e097cd7f69eab8
- SHA256
  
  28205c880c248e83bd3f1192fb118fb26c5f734b5a980566c3e3165d4aa69ff0
- SHA512
  
  4fa179192c484df22e8cfd4c626faf89781eff0d4ff9fb9a9c66c9f7ffbfb810dda0b26c0bdc69d68aaa4bd6f7941ef9fb1d5b34134dc1fcfce24faf9d518977
- SSDEEP
  
  768:riOWDYPSCLyfS3gHWHocT9wuH5n/SMeIiolx4wle3:48KCLyfT2HXFaMeNok
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan