metasploit | e54e94214c7d4a8fd3d1ea3dc1f851ac27dde76f4b26ab7e48f6b9aaa27611d8 | Triage

Sharing

General

Target

d2087627f0e9923a013320e1c339487b_JaffaCakes118
Size

85KB
Sample

241207-mrcsysypf1
MD5

d2087627f0e9923a013320e1c339487b
SHA1

a2b34ea177e65471bf205edd1bd6149f0fde81be
SHA256

e54e94214c7d4a8fd3d1ea3dc1f851ac27dde76f4b26ab7e48f6b9aaa27611d8
SHA512

b66628436e2d614d0db242dd9ca1f9c09d521e8b36c245008bb064616e3ed09f6197947882c7d551ae48daf6fc4aacad91d8e2026f4ff65510379276cf1eeb64
SSDEEP

768:I6vClYKLi57RSc/2brqTb/qNATNzi6F4KJe6R4ZU9qZU9y:I6WYKLKDbTbySTf4+R4pl

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.2:8080

Targets

- Target
  
  d2087627f0e9923a013320e1c339487b_JaffaCakes118
- Size
  
  85KB
- MD5
  
  d2087627f0e9923a013320e1c339487b
- SHA1
  
  a2b34ea177e65471bf205edd1bd6149f0fde81be
- SHA256
  
  e54e94214c7d4a8fd3d1ea3dc1f851ac27dde76f4b26ab7e48f6b9aaa27611d8
- SHA512
  
  b66628436e2d614d0db242dd9ca1f9c09d521e8b36c245008bb064616e3ed09f6197947882c7d551ae48daf6fc4aacad91d8e2026f4ff65510379276cf1eeb64
- SSDEEP
  
  768:I6vClYKLi57RSc/2brqTb/qNATNzi6F4KJe6R4ZU9qZU9y:I6WYKLKDbTbySTf4+R4pl
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan