metasploit | 5499810408b00210ed8cc41a5b779ed3c6f3d7703715510a4511324b9590715c | Triage

Sharing

General

Target

f7c291c7b59907191eb6249ea25db65b_JaffaCakes118
Size

5KB
Sample

241216-hdb72szmem
MD5

f7c291c7b59907191eb6249ea25db65b
SHA1

93009cad68becae2591102f431c4a14695accd89
SHA256

5499810408b00210ed8cc41a5b779ed3c6f3d7703715510a4511324b9590715c
SHA512

2be1e74edbb310761c22cde72cf9ebccbf317a896c1bd86b4acfe694d4c2bdd054db9e578a414bfd8eba3005fcac2bdc048897c735aac00d2fa9705e60537b85
SSDEEP

96:1EW+KINu62Gn1asTU9ig+IGs7YdDjSx+C0whMnWApAhigta6JhduV0:1V+TN52RicGsgaxppRqcioaYhduV0

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

91.191.209.122:1213

Targets

- Target
  
  f7c291c7b59907191eb6249ea25db65b_JaffaCakes118
- Size
  
  5KB
- MD5
  
  f7c291c7b59907191eb6249ea25db65b
- SHA1
  
  93009cad68becae2591102f431c4a14695accd89
- SHA256
  
  5499810408b00210ed8cc41a5b779ed3c6f3d7703715510a4511324b9590715c
- SHA512
  
  2be1e74edbb310761c22cde72cf9ebccbf317a896c1bd86b4acfe694d4c2bdd054db9e578a414bfd8eba3005fcac2bdc048897c735aac00d2fa9705e60537b85
- SSDEEP
  
  96:1EW+KINu62Gn1asTU9ig+IGs7YdDjSx+C0whMnWApAhigta6JhduV0:1V+TN52RicGsgaxppRqcioaYhduV0
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan