metasploit | 1e8cb9aa63e06fda0a4ef8fc500e3dbadaf99c79303e3ad94d263cfcabc19bba | Triage

Sharing

General

Target

f2965fb7b88ff2904e36d1bfe3cfe469_JaffaCakes118
Size

72KB
Sample

240923-s5knlsthrd
MD5

f2965fb7b88ff2904e36d1bfe3cfe469
SHA1

a66667fe9fa61e08a7fae8756b533d6a61af6714
SHA256

1e8cb9aa63e06fda0a4ef8fc500e3dbadaf99c79303e3ad94d263cfcabc19bba
SHA512

59100df33172fc1bbbbce6cd3e4c97e5dafa4cfef56acd07f6b8eb28e815018f2a3364067c7ad9121e1680d347652fe67ff4ce63d617dad85784309abe7ad54f
SSDEEP

1536:Ir51QoUBQCKdFR4UJY6tLEtf/Y2FMzGPMb+KR0Nc8QsJq39:m5G0Rbe6tLetoYe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

113.173.214.105:4444

Targets

- Target
  
  f2965fb7b88ff2904e36d1bfe3cfe469_JaffaCakes118
- Size
  
  72KB
- MD5
  
  f2965fb7b88ff2904e36d1bfe3cfe469
- SHA1
  
  a66667fe9fa61e08a7fae8756b533d6a61af6714
- SHA256
  
  1e8cb9aa63e06fda0a4ef8fc500e3dbadaf99c79303e3ad94d263cfcabc19bba
- SHA512
  
  59100df33172fc1bbbbce6cd3e4c97e5dafa4cfef56acd07f6b8eb28e815018f2a3364067c7ad9121e1680d347652fe67ff4ce63d617dad85784309abe7ad54f
- SSDEEP
  
  1536:Ir51QoUBQCKdFR4UJY6tLEtf/Y2FMzGPMb+KR0Nc8QsJq39:m5G0Rbe6tLetoYe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan