metasploit | 078d06d8fd3cb8a8ee236ac1efdbe2395636a1ed0497754fda700f3b4243bdbe | Triage

Sharing

General

Target

f917f90c7ddcc551c0044455a1df80fb_JaffaCakes118
Size

448KB
Sample

240926-yfxvjaxglg
MD5

f917f90c7ddcc551c0044455a1df80fb
SHA1

a1dc4d94d6c103dc41fd3591e842b41673d64530
SHA256

078d06d8fd3cb8a8ee236ac1efdbe2395636a1ed0497754fda700f3b4243bdbe
SHA512

d9b33443a055c84ef57710652ee235149d15d468bf9268b592e9bd01ecfa44d59e3b08ced9ba174b8e9f4961c8dfc93d4717e9b0cac9f2c150215a8a7d0d2a0d
SSDEEP

12288:CLXmgMb4Xd+Uh8ggdE8Ox4GoyPV4qOr1nBMIQn6:CDmgMbVujg9u4GBPVLOr1nvM6

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

1.1.1.1:80

Targets

- Target
  
  f917f90c7ddcc551c0044455a1df80fb_JaffaCakes118
- Size
  
  448KB
- MD5
  
  f917f90c7ddcc551c0044455a1df80fb
- SHA1
  
  a1dc4d94d6c103dc41fd3591e842b41673d64530
- SHA256
  
  078d06d8fd3cb8a8ee236ac1efdbe2395636a1ed0497754fda700f3b4243bdbe
- SHA512
  
  d9b33443a055c84ef57710652ee235149d15d468bf9268b592e9bd01ecfa44d59e3b08ced9ba174b8e9f4961c8dfc93d4717e9b0cac9f2c150215a8a7d0d2a0d
- SSDEEP
  
  12288:CLXmgMb4Xd+Uh8ggdE8Ox4GoyPV4qOr1nBMIQn6:CDmgMbVujg9u4GBPVLOr1nvM6
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan