metasploit | 7173e676150d0a27f7e1695ab7a9e34c38a3d4f5c6066c6e048f5ae91f3905f4 | Triage

Sharing

General

Target

JaffaCakes118_7173e676150d0a27f7e1695ab7a9e34c38a3d4f5c6066c6e048f5ae91f3905f4
Size

7KB
Sample

241225-fqsdpaypcj
MD5

32edb8f319f33d54ad3873425fb2308a
SHA1

cb44aebe6924a09a9b2260e7b04e61fad95a8d07
SHA256

7173e676150d0a27f7e1695ab7a9e34c38a3d4f5c6066c6e048f5ae91f3905f4
SHA512

ab01086711e1585b92b37f0a8d2b208a6e0decea5702396c04ba47e8d454a9bedb03c9b6cd1ed9e6ce250b1b3e2864c839f66ed32c7693607b789a71cee6a0a3
SSDEEP

192:o+FtgyOzpjpTqVI8SA5/gPnpDosQ/x/UMx0q4J5vF/pkJO:o2ZOVl+VVr01G/U3360

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://jchen.tk:8080/s6Ne

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2)

Targets

- Target
  
  7b2ca38b4bf9ca7fa5adf95d39c0d2281161133c078fb93cff69cf67089fab0d
- Size
  
  14KB
- MD5
  
  1d2979fd20ee49c15a8816fbb1ea1002
- SHA1
  
  5c935e7ec4423ddcc0e5a2cb45d1658cb0dbf7ee
- SHA256
  
  7b2ca38b4bf9ca7fa5adf95d39c0d2281161133c078fb93cff69cf67089fab0d
- SHA512
  
  0eb9799b9ecd7cdf765589af229fee2aeb2eb8c8878618d0948b188e8833342aca57666293022b4bb12dfec9d55fb680948a401a853213f4df06269e650b717c
- SSDEEP
  
  192:5HCugRK83SxHn2OQ/dmBI4KBPwgir+xzJMKwN3fVDbqUqV/Qjo7AGa:xCxRKqbOCdWIVBPk+xzJY9nfCXAn
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan