metasploit | 5f823a74bf441f005492150de9aa35b47bcf1de919136e2f326949c3930bccdd | Triage

Sharing

General

Target

f7d5c762c8c35e34394be15381c03120_JaffaCakes118
Size

72KB
Sample

240926-hy6bmatgjr
MD5

f7d5c762c8c35e34394be15381c03120
SHA1

5f38e46f7eee84662b821c158268766f79490fee
SHA256

5f823a74bf441f005492150de9aa35b47bcf1de919136e2f326949c3930bccdd
SHA512

2ca95494b0c78301f5290e7a8482887ba817d30119bd65a426a9dc5a19ac700decd986ec7ebef7861c60a7d4cf3990cd73d43a4397b35cdc9483d5c8f7b675f5
SSDEEP

1536:Iz7FFJPS3r4Kqw9hs2/9Rn3aOZ+602Mb+KR0Nc8Qs:wZFJPSOshs2/r3v0Oe0Nc8Qs

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.58.128:31337

Targets

- Target
  
  f7d5c762c8c35e34394be15381c03120_JaffaCakes118
- Size
  
  72KB
- MD5
  
  f7d5c762c8c35e34394be15381c03120
- SHA1
  
  5f38e46f7eee84662b821c158268766f79490fee
- SHA256
  
  5f823a74bf441f005492150de9aa35b47bcf1de919136e2f326949c3930bccdd
- SHA512
  
  2ca95494b0c78301f5290e7a8482887ba817d30119bd65a426a9dc5a19ac700decd986ec7ebef7861c60a7d4cf3990cd73d43a4397b35cdc9483d5c8f7b675f5
- SSDEEP
  
  1536:Iz7FFJPS3r4Kqw9hs2/9Rn3aOZ+602Mb+KR0Nc8Qs:wZFJPSOshs2/r3v0Oe0Nc8Qs
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan