metasploit | b597a0bce3327582327db3b22b208aee26a72e50a4a65c07f1883c3576e5a54a | Triage

Sharing

General

Target

bc6b560888490891c2fb0a5d0faf5db3_JaffaCakes118
Size

68KB
Sample

241203-jr9wxawmgw
MD5

bc6b560888490891c2fb0a5d0faf5db3
SHA1

776eea7c6f19b1b55f0e33083e9b830ca7fa849c
SHA256

b597a0bce3327582327db3b22b208aee26a72e50a4a65c07f1883c3576e5a54a
SHA512

5cd435e134e311e412a6ddbd7d88c3801a093e310f3cf036d3f4a86ca84e1854046461064fe968da768b5178f5831b5c8655640095fec2e547e0f18964ea38ea
SSDEEP

1536:Kun9fT2lHCH7kXcTM0oIhZJI03JUEbooPRrKKR5Y6beKGPD/9Zlk5Nequ:Fnp4HMBIJizI03JltZrpR5YOeKGPD/9z

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.100:31337

Targets

- Target
  
  bc6b560888490891c2fb0a5d0faf5db3_JaffaCakes118
- Size
  
  68KB
- MD5
  
  bc6b560888490891c2fb0a5d0faf5db3
- SHA1
  
  776eea7c6f19b1b55f0e33083e9b830ca7fa849c
- SHA256
  
  b597a0bce3327582327db3b22b208aee26a72e50a4a65c07f1883c3576e5a54a
- SHA512
  
  5cd435e134e311e412a6ddbd7d88c3801a093e310f3cf036d3f4a86ca84e1854046461064fe968da768b5178f5831b5c8655640095fec2e547e0f18964ea38ea
- SSDEEP
  
  1536:Kun9fT2lHCH7kXcTM0oIhZJI03JUEbooPRrKKR5Y6beKGPD/9Zlk5Nequ:Fnp4HMBIJizI03JltZrpR5YOeKGPD/9z
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan