metasploit | dcf3d53c59604ab6c7538eecf82e07fba5fe83f435bc4c65c531e406dabd0145 | Triage

Sharing

General

Target

d5b55f0ea71af59c702512d230cb0eaa_JaffaCakes118
Size

146KB
Sample

241208-hbvxda1lbr
MD5

d5b55f0ea71af59c702512d230cb0eaa
SHA1

4805922d415501855d8d89536c998a628c96a3e6
SHA256

dcf3d53c59604ab6c7538eecf82e07fba5fe83f435bc4c65c531e406dabd0145
SHA512

c39f96ecd10a94c566dd211f20fbe5cbd087356ca7c0a6766c71b886a91b1dc74cddbee6cb7a315744b38774028bd6174b42513fbf72e5a594e0ba8b7122f104
SSDEEP

3072:UkfkXP5KTx+KJDvTcNE/NgyJnDIBetryV1DC5jiq:UkMkAKdvTDgyD0OL5ji

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

- Target
  
  d5b55f0ea71af59c702512d230cb0eaa_JaffaCakes118
- Size
  
  146KB
- MD5
  
  d5b55f0ea71af59c702512d230cb0eaa
- SHA1
  
  4805922d415501855d8d89536c998a628c96a3e6
- SHA256
  
  dcf3d53c59604ab6c7538eecf82e07fba5fe83f435bc4c65c531e406dabd0145
- SHA512
  
  c39f96ecd10a94c566dd211f20fbe5cbd087356ca7c0a6766c71b886a91b1dc74cddbee6cb7a315744b38774028bd6174b42513fbf72e5a594e0ba8b7122f104
- SSDEEP
  
  3072:UkfkXP5KTx+KJDvTcNE/NgyJnDIBetryV1DC5jiq:UkMkAKdvTDgyD0OL5ji
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan