metasploit | ed95ab4842f2850fd26f21c7857e2d291aac254df2516119f125213725ac8f4d | Triage

Sharing

General

Target

a507fd9c019117fec3114331706f5a6b_JaffaCakes118
Size

72KB
Sample

241127-a6xepavlgm
MD5

a507fd9c019117fec3114331706f5a6b
SHA1

37ba172eecd9517026d6dba0676d46cfe2723e9d
SHA256

ed95ab4842f2850fd26f21c7857e2d291aac254df2516119f125213725ac8f4d
SHA512

ea4753d7484d5b17e8399970e58cf62a1a0f1fac0474b42fadea6078355070433be7146be924eebc7dbe9a10586a9a59a428efb27443543c79a18f225be53a1d
SSDEEP

1536:Ize/x8SpynMtwSL8cw4lNqEfWgvQjGwMb+KR0Nc8QsJq39:OGbpyMtwdz8ilGwe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.14:5666

Targets

- Target
  
  a507fd9c019117fec3114331706f5a6b_JaffaCakes118
- Size
  
  72KB
- MD5
  
  a507fd9c019117fec3114331706f5a6b
- SHA1
  
  37ba172eecd9517026d6dba0676d46cfe2723e9d
- SHA256
  
  ed95ab4842f2850fd26f21c7857e2d291aac254df2516119f125213725ac8f4d
- SHA512
  
  ea4753d7484d5b17e8399970e58cf62a1a0f1fac0474b42fadea6078355070433be7146be924eebc7dbe9a10586a9a59a428efb27443543c79a18f225be53a1d
- SSDEEP
  
  1536:Ize/x8SpynMtwSL8cw4lNqEfWgvQjGwMb+KR0Nc8QsJq39:OGbpyMtwdz8ilGwe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan