metasploit | 764e2068efb099cdedd68d58c2f28bee9e6ed8c18875f28a61767f209ed1fb74 | Triage

Sharing

General

Target

f5263d49988a024d61fa855fbe350053_JaffaCakes118
Size

16KB
Sample

240925-eq79gavapr
MD5

f5263d49988a024d61fa855fbe350053
SHA1

7841ed30d59b52936c6418e8bd9db74dd912dbab
SHA256

764e2068efb099cdedd68d58c2f28bee9e6ed8c18875f28a61767f209ed1fb74
SHA512

51c9ce216933279b167854f4482a9c2ab6f4c62846f0b65517121b0e034647badd9db498afbde6f34190a00a0c6e6902d42ed53a99d82093457a7a224030ba3c
SSDEEP

192:fUDHKslmk4/3yZOT437W3aNVkjyFoqcCDx:f0LOCZs437WsGeaqrt

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.152.128:443

Targets

- Target
  
  f5263d49988a024d61fa855fbe350053_JaffaCakes118
- Size
  
  16KB
- MD5
  
  f5263d49988a024d61fa855fbe350053
- SHA1
  
  7841ed30d59b52936c6418e8bd9db74dd912dbab
- SHA256
  
  764e2068efb099cdedd68d58c2f28bee9e6ed8c18875f28a61767f209ed1fb74
- SHA512
  
  51c9ce216933279b167854f4482a9c2ab6f4c62846f0b65517121b0e034647badd9db498afbde6f34190a00a0c6e6902d42ed53a99d82093457a7a224030ba3c
- SSDEEP
  
  192:fUDHKslmk4/3yZOT437W3aNVkjyFoqcCDx:f0LOCZs437WsGeaqrt
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan