metasploit | bdd2647b3e4e266b0948b8b2bc8e3cdc3660454232be4ddf27e9e72de9df50ea | Triage

Sharing

General

Target

d5795e059f04f8ddcb0282d36c9bf1c1_JaffaCakes118
Size

72KB
Sample

241208-f7keeazkhp
MD5

d5795e059f04f8ddcb0282d36c9bf1c1
SHA1

b71af799d170a8811a174fee477b77e65f4431d4
SHA256

bdd2647b3e4e266b0948b8b2bc8e3cdc3660454232be4ddf27e9e72de9df50ea
SHA512

c14650203e0300615e0c0b1bf8664427d75b1f55dc6d3a497cafc3f3190774a138a2c8fb5a8c0ca0904abbb50d305e83b8c5a76cfb14e2c8e379b99beda1db61
SSDEEP

1536:IIabNn/fqF8euEdV1gTXDCcf3w+U+GlDfMb+KR0Nc8QsJq39:Tax/fqmEWTXDZ8hZfe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.200.160:8080

Targets

- Target
  
  d5795e059f04f8ddcb0282d36c9bf1c1_JaffaCakes118
- Size
  
  72KB
- MD5
  
  d5795e059f04f8ddcb0282d36c9bf1c1
- SHA1
  
  b71af799d170a8811a174fee477b77e65f4431d4
- SHA256
  
  bdd2647b3e4e266b0948b8b2bc8e3cdc3660454232be4ddf27e9e72de9df50ea
- SHA512
  
  c14650203e0300615e0c0b1bf8664427d75b1f55dc6d3a497cafc3f3190774a138a2c8fb5a8c0ca0904abbb50d305e83b8c5a76cfb14e2c8e379b99beda1db61
- SSDEEP
  
  1536:IIabNn/fqF8euEdV1gTXDCcf3w+U+GlDfMb+KR0Nc8QsJq39:Tax/fqmEWTXDZ8hZfe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan