metasploit | 9bc5d6c3ffd6586036ed34e35a7f32e9c4b71d4d05d9b0d645ea792cb0257dea | Triage

Sharing

General

Target

JaffaCakes118_9bc5d6c3ffd6586036ed34e35a7f32e9c4b71d4d05d9b0d645ea792cb0257dea
Size

229KB
Sample

241224-qhrgjayjbz
MD5

07ebe02c18d2be30e888c2cbce9160fd
SHA1

fb45e6171bf3fdd12232d8b95afbebc5e9f5077e
SHA256

9bc5d6c3ffd6586036ed34e35a7f32e9c4b71d4d05d9b0d645ea792cb0257dea
SHA512

8a892f6b6a10f1b5847bf520e1b1ac4ee2250e14f8f075662f07005a286052a61d51a663026628d03e8be503a1369adb329bf93d92dd8b7ccdcf7fbb3813eba8
SSDEEP

6144:Cn0E4onzlcaDOBwd+6O72R/bgaXCnxgMXtyf:C0AZca146O72gWig+O

Score

10^/10

metasploit backdoor discovery javascript pdf trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.10.70:4444

Targets

- Target
  
  53373bad4e9ebce6d133cf2f08bce78a523bb2faf40840d7d3a7c0fe24dec027
- Size
  
  300KB
- MD5
  
  6e38c1f164bfc763d444c39fe4e165b0
- SHA1
  
  5c4151862bb052a50e4588d7be35a9a5ea6b16cf
- SHA256
  
  53373bad4e9ebce6d133cf2f08bce78a523bb2faf40840d7d3a7c0fe24dec027
- SHA512
  
  cfab07afb8ca14fcac97cc4564130e88a7de4d885234b920dc3e5c8122d97c1881ca5b92761861d7d3c9479800ef5e973efffc24caacbcbe2be1ff85141381c7
- SSDEEP
  
  6144:po8OtPgMX+Pu8SW8cjTnpVJg3qtD8AWuvdBYm5gTK0:iPgCSVSXc3pzPtD1Wuv3ge0
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  584.pdf
- Size
  
  72KB
- MD5
  
  861e43667d84d76bff05868a9d4de52e
- SHA1
  
  643167f1ab323b376c017241131d5372a3c3c158
- SHA256
  
  560ac90f2c486d526cbb6e56cb9fe10e5c354c17d6b232c9dd67cfeac78b8119
- SHA512
  
  71d0033530850e76c961d4163a1b6edb5d9963ad5c4f633824e04794636978c759026f8ee36c94dea100d454f94b5c9b4870da9e4b2920ae0ed650f54429cf14
- SSDEEP
  
  1536:I5xczAptk+BttF+fNwHSxyIBnJeMb+KR0Nc8QsJq39:Kc4i+BttFOFZJee0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pdfjavascriptmetasploit

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

behavioral3

metasploitbackdoordiscoverytrojan

behavioral4

metasploitbackdoordiscoverytrojan