metasploit | b281809b4a5e8bed37576f1e398495014ea6e4f4c897914149ec8ddda3f144d1 | Triage

Sharing

General

Target

f81adb5cc4df94c874ffc2d0d3e78df6_JaffaCakes118
Size

2.7MB
Sample

240926-lwgf9szgjp
MD5

f81adb5cc4df94c874ffc2d0d3e78df6
SHA1

7a854ab8742e9153d883e3a607abb6354c3fbb37
SHA256

b281809b4a5e8bed37576f1e398495014ea6e4f4c897914149ec8ddda3f144d1
SHA512

555f269631924c7ddc215a0624c7864735c4c937f1339ada85197c061b1ad4c82517d5cc0e369b29e188e8118ea5e8c6520a3c0138883e56fb883850d64fbbe0
SSDEEP

49152:0x45MDIphpQLgfrJ4WIlE/z4Z5GVl1+WqD8:0x45MDIxOgfl4WIlELI5GVlq8

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_bind_tcp

Targets

- Target
  
  f81adb5cc4df94c874ffc2d0d3e78df6_JaffaCakes118
- Size
  
  2.7MB
- MD5
  
  f81adb5cc4df94c874ffc2d0d3e78df6
- SHA1
  
  7a854ab8742e9153d883e3a607abb6354c3fbb37
- SHA256
  
  b281809b4a5e8bed37576f1e398495014ea6e4f4c897914149ec8ddda3f144d1
- SHA512
  
  555f269631924c7ddc215a0624c7864735c4c937f1339ada85197c061b1ad4c82517d5cc0e369b29e188e8118ea5e8c6520a3c0138883e56fb883850d64fbbe0
- SSDEEP
  
  49152:0x45MDIphpQLgfrJ4WIlE/z4Z5GVl1+WqD8:0x45MDIxOgfl4WIlELI5GVlq8
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan