metasploit | bad4e927d738d42f30698f3b6577cb497e2646b684369c2dd19cc7977eb22982 | Triage

Sharing

General

Target

JaffaCakes118_bad4e927d738d42f30698f3b6577cb497e2646b684369c2dd19cc7977eb22982
Size

44KB
Sample

241230-3cwwaawngz
MD5

a17c1e939af6fef40b0551984fe21bb3
SHA1

523ef3d000e87e5ecb4b3f0236540fdad9250e3b
SHA256

bad4e927d738d42f30698f3b6577cb497e2646b684369c2dd19cc7977eb22982
SHA512

304cd4703bfb7a53d0e588fc5d09f40857288cf35d4d996d0502dae93d6c508162da2d964d2bc0f6ec92165c866cebb4cff94103739012ffd6f1c17f0f315593
SSDEEP

768:wToKGCb4eWTTSon1VS6chZUCQH0jaGtu9edNPUiKYYSGxvVpmW0XxkZBk7:i4Ct4ukVYDCGae/NPUiK5fx6XxOU

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

167.86.108.26:4444

Targets

- Target
  
  880b6bca5465e6f430832db12f6ac4bc4c81a5564051115cff1d5c5e95126760
- Size
  
  72KB
- MD5
  
  8e4f5e1a71061aaa6879d4645b528174
- SHA1
  
  92b85af2091fa5bc82116a3b9604353ee203fed2
- SHA256
  
  880b6bca5465e6f430832db12f6ac4bc4c81a5564051115cff1d5c5e95126760
- SHA512
  
  56fb7207464cb9465284a7ef63d30145deb3cf014c7fd7a63b609555a7a57b214563ebe01d1af300a6948e0fac6ceb66d400261db73f75b6ac4d86ddfec7cc9a
- SSDEEP
  
  1536:IbYIMm11Tu8O98LvB2UwJ2Q0n73xbMb+KR0Nc8QsJq39:uYTufq8TI/J2r73Fe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan