metasploit | b3bfca9ad0e1b51c8eeccac4c051d9bed62b7ae8f55c19ee162ca303f62ddd92 | Triage

Sharing

General

Target

ffbd383b3c2f3867ec1c164628cb65df_JaffaCakes118
Size

444KB
Sample

241219-tfa9bavqem
MD5

ffbd383b3c2f3867ec1c164628cb65df
SHA1

f0bd140951c472ef5ed9e9a9aa91daccd3f98f1c
SHA256

b3bfca9ad0e1b51c8eeccac4c051d9bed62b7ae8f55c19ee162ca303f62ddd92
SHA512

2fcb48370c04680d64e6456e8d9fd0340cc9be7cc3720079d38f519f3cf02b1eed25ea851447cab061be01c2f3ab7c750a2615345d3795eceef4f748ef2b46ed
SSDEEP

6144:w1E6SZ6EcdB5Eic3QiYyTY+ueIlntcvGn6rtQTWsoFF9RA7fFnb26Vx6zMV:w1hACJcRTkeIlLQtQTWfFF9Qn6

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

- Target
  
  ffbd383b3c2f3867ec1c164628cb65df_JaffaCakes118
- Size
  
  444KB
- MD5
  
  ffbd383b3c2f3867ec1c164628cb65df
- SHA1
  
  f0bd140951c472ef5ed9e9a9aa91daccd3f98f1c
- SHA256
  
  b3bfca9ad0e1b51c8eeccac4c051d9bed62b7ae8f55c19ee162ca303f62ddd92
- SHA512
  
  2fcb48370c04680d64e6456e8d9fd0340cc9be7cc3720079d38f519f3cf02b1eed25ea851447cab061be01c2f3ab7c750a2615345d3795eceef4f748ef2b46ed
- SSDEEP
  
  6144:w1E6SZ6EcdB5Eic3QiYyTY+ueIlntcvGn6rtQTWsoFF9RA7fFnb26Vx6zMV:w1hACJcRTkeIlLQtQTWfFF9Qn6
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan