metasploit | 5d211cd19b62ee17234d688c173c9167d4730de633425814a42678eea77126d8 | Triage

Sharing

General

Target

f15381d8761ca8e670a80b73ba88c8d0_JaffaCakes118
Size

42KB
Sample

241214-3znheszmep
MD5

f15381d8761ca8e670a80b73ba88c8d0
SHA1

0b42ba4c042a9efafc38629e5e3df45f216ddcf7
SHA256

5d211cd19b62ee17234d688c173c9167d4730de633425814a42678eea77126d8
SHA512

e4dff9e79f1c6d5948e4a54a2f23c7904d3690fdef3d45beb22861607fb469780caae112abe397d56864661b2108491cfe0c59f7e1e866ef3cc7a31e60c6f31d
SSDEEP

768:xAD1sCPgksRQK0JHXgP5syNKRHFwgdA0RLQ:ks4iQF9ge17o

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.30:4444

Targets

- Target
  
  f15381d8761ca8e670a80b73ba88c8d0_JaffaCakes118
- Size
  
  42KB
- MD5
  
  f15381d8761ca8e670a80b73ba88c8d0
- SHA1
  
  0b42ba4c042a9efafc38629e5e3df45f216ddcf7
- SHA256
  
  5d211cd19b62ee17234d688c173c9167d4730de633425814a42678eea77126d8
- SHA512
  
  e4dff9e79f1c6d5948e4a54a2f23c7904d3690fdef3d45beb22861607fb469780caae112abe397d56864661b2108491cfe0c59f7e1e866ef3cc7a31e60c6f31d
- SSDEEP
  
  768:xAD1sCPgksRQK0JHXgP5syNKRHFwgdA0RLQ:ks4iQF9ge17o
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan