metasploit | 18351799543b9048310b64fb90cdbabe4f7431058e5fbb64ba2e85bd79aa6786 | Triage

Sharing

General

Target

bff30cc83bb2f43d4b4393250a3fc213_JaffaCakes118
Size

184KB
Sample

241204-aqpd5sxndp
MD5

bff30cc83bb2f43d4b4393250a3fc213
SHA1

409cf5f7cf9cf2e013a9d7b7693d02b0fbbdda5a
SHA256

18351799543b9048310b64fb90cdbabe4f7431058e5fbb64ba2e85bd79aa6786
SHA512

29b0d90194cbd1ec5543095189040f273e4f424c6ae83bafc80e6b5af38f9ebe36e755cf5f84701f2ef55c3ef05c7f855492e08b99bf04adb05b46022e238158
SSDEEP

3072:7c5nHs6QoK9wWdfERBn5GtjYOTA0IUHaZHuk/5rST:7clHs6QZwQKv8YOTA0IUHYdM

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.98.26:443

Targets

- Target
  
  bff30cc83bb2f43d4b4393250a3fc213_JaffaCakes118
- Size
  
  184KB
- MD5
  
  bff30cc83bb2f43d4b4393250a3fc213
- SHA1
  
  409cf5f7cf9cf2e013a9d7b7693d02b0fbbdda5a
- SHA256
  
  18351799543b9048310b64fb90cdbabe4f7431058e5fbb64ba2e85bd79aa6786
- SHA512
  
  29b0d90194cbd1ec5543095189040f273e4f424c6ae83bafc80e6b5af38f9ebe36e755cf5f84701f2ef55c3ef05c7f855492e08b99bf04adb05b46022e238158
- SSDEEP
  
  3072:7c5nHs6QoK9wWdfERBn5GtjYOTA0IUHaZHuk/5rST:7clHs6QZwQKv8YOTA0IUHYdM
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan