metasploit | 09fee163486824098c36fa8a48796bb36b2d20b40033a573df5a36dca1c402bd | Triage

Sharing

General

Target

JaffaCakes118_44ebb5ac95a06a5b67e8189a37896270
Size

503KB
Sample

250101-dlvxxasmdz
MD5

44ebb5ac95a06a5b67e8189a37896270
SHA1

d691c551780cf96ba1d80d0da1228cde24859028
SHA256

09fee163486824098c36fa8a48796bb36b2d20b40033a573df5a36dca1c402bd
SHA512

e133ed1ce8f2adc681955c982006bd42436f750096d6cd08be9001d2645d182b658b6bd4da5688ddd967697bf8b780665b5e9238ee36de489e5ca3f65654209b
SSDEEP

6144:RBJBbIOkgKzCe9dMVHsGLULRTXFewKFWTyMTkiYCw+VSvGFal+412cicnoACqzMv:rJBMOkce9dgHs+UTVhdK12ciOs60/

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.101:443

Targets

- Target
  
  JaffaCakes118_44ebb5ac95a06a5b67e8189a37896270
- Size
  
  503KB
- MD5
  
  44ebb5ac95a06a5b67e8189a37896270
- SHA1
  
  d691c551780cf96ba1d80d0da1228cde24859028
- SHA256
  
  09fee163486824098c36fa8a48796bb36b2d20b40033a573df5a36dca1c402bd
- SHA512
  
  e133ed1ce8f2adc681955c982006bd42436f750096d6cd08be9001d2645d182b658b6bd4da5688ddd967697bf8b780665b5e9238ee36de489e5ca3f65654209b
- SSDEEP
  
  6144:RBJBbIOkgKzCe9dMVHsGLULRTXFewKFWTyMTkiYCw+VSvGFal+412cicnoACqzMv:rJBMOkce9dgHs+UTVhdK12ciOs60/
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan