metasploit | 11b32b5b7cbd136242c3fe81cc6d148b4efffe44f45633299a2d3907237faa0d | Triage

Sharing

General

Target

f701923ae45f7c9ae98f864535e51c5b_JaffaCakes118
Size

10KB
Sample

240925-2qp48avfqf
MD5

f701923ae45f7c9ae98f864535e51c5b
SHA1

b710b5ace42981a62e4f65b5596fba1aec4dc2c1
SHA256

11b32b5b7cbd136242c3fe81cc6d148b4efffe44f45633299a2d3907237faa0d
SHA512

3800a025b3e34e08f40dac25a20047762974506d943263e0d784b87abf74293df80837a2b4413f87bceef4412ce2574554fc2e63eeec09dff558fe76bd330673
SSDEEP

192:b8QEXLSEWxIyWmHlnVH8nBznQznXM7WEjBdBr9jBhfKys4d+7nyvQFo8g:biLfWVcBzQzXhwJJsbzz

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

172.16.55.1:6666

Targets

- Target
  
  f701923ae45f7c9ae98f864535e51c5b_JaffaCakes118
- Size
  
  10KB
- MD5
  
  f701923ae45f7c9ae98f864535e51c5b
- SHA1
  
  b710b5ace42981a62e4f65b5596fba1aec4dc2c1
- SHA256
  
  11b32b5b7cbd136242c3fe81cc6d148b4efffe44f45633299a2d3907237faa0d
- SHA512
  
  3800a025b3e34e08f40dac25a20047762974506d943263e0d784b87abf74293df80837a2b4413f87bceef4412ce2574554fc2e63eeec09dff558fe76bd330673
- SSDEEP
  
  192:b8QEXLSEWxIyWmHlnVH8nBznQznXM7WEjBdBr9jBhfKys4d+7nyvQFo8g:biLfWVcBzQzXhwJJsbzz
Score

10^/10

discovery metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

metasploitbackdoordiscoverytrojan