metasploit | f018e2c20b13c71e3533263f06a88003cfe66bb966d6fe3e0cd6221e7f0f1cfa | Triage

Sharing

General

Target

d281bf0819763af7383637901ee65867_JaffaCakes118
Size

472KB
Sample

241207-pxx27axqhr
MD5

d281bf0819763af7383637901ee65867
SHA1

699a157341c73f167764d23fbd219d726f740a36
SHA256

f018e2c20b13c71e3533263f06a88003cfe66bb966d6fe3e0cd6221e7f0f1cfa
SHA512

911c8358db9fa86d690a7f3caf28b8665364f95ddc3a74fe1faf1283b5b7b68242ac46d19f4c091353756cd46c1aee32afc341e128beefe563a3feaa0c1ca58c
SSDEEP

12288:MUxhqJHFtWzSZuNf0CAGEXmEeLW+j0q692:Hk5FtIS0DAGJEeFb68

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.36:8883

Targets

- Target
  
  d281bf0819763af7383637901ee65867_JaffaCakes118
- Size
  
  472KB
- MD5
  
  d281bf0819763af7383637901ee65867
- SHA1
  
  699a157341c73f167764d23fbd219d726f740a36
- SHA256
  
  f018e2c20b13c71e3533263f06a88003cfe66bb966d6fe3e0cd6221e7f0f1cfa
- SHA512
  
  911c8358db9fa86d690a7f3caf28b8665364f95ddc3a74fe1faf1283b5b7b68242ac46d19f4c091353756cd46c1aee32afc341e128beefe563a3feaa0c1ca58c
- SSDEEP
  
  12288:MUxhqJHFtWzSZuNf0CAGEXmEeLW+j0q692:Hk5FtIS0DAGJEeFb68
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan