metasploit | 7fb34b7d81b2eef5a07062ed321d61553cfdf9796d220f35182a93f7fed26a3b | Triage

Sharing

General

Target

f703b465e10a9b38af6c83446af19e26_JaffaCakes118
Size

72KB
Sample

240925-2t359avhlf
MD5

f703b465e10a9b38af6c83446af19e26
SHA1

2bbc2ebbd541fbfdab11c1087a8838a16546d46e
SHA256

7fb34b7d81b2eef5a07062ed321d61553cfdf9796d220f35182a93f7fed26a3b
SHA512

af45130a3bf19befde0a0a60ea5f00531cfbdc8bc1041c9027d0b18869a5dc5fd8aedc062d370bd477ee38a6f7afbda9a52c32e589afc22de58ac7d978f6ced5
SSDEEP

1536:IC01BHADoaafKpg1OTlTlWMb+KR0Nc8QsJq39:P0koaasg1OTnWe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.0.3:8443/INITM

Targets

- Target
  
  f703b465e10a9b38af6c83446af19e26_JaffaCakes118
- Size
  
  72KB
- MD5
  
  f703b465e10a9b38af6c83446af19e26
- SHA1
  
  2bbc2ebbd541fbfdab11c1087a8838a16546d46e
- SHA256
  
  7fb34b7d81b2eef5a07062ed321d61553cfdf9796d220f35182a93f7fed26a3b
- SHA512
  
  af45130a3bf19befde0a0a60ea5f00531cfbdc8bc1041c9027d0b18869a5dc5fd8aedc062d370bd477ee38a6f7afbda9a52c32e589afc22de58ac7d978f6ced5
- SSDEEP
  
  1536:IC01BHADoaafKpg1OTlTlWMb+KR0Nc8QsJq39:P0koaasg1OTnWe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan