metasploit | 16a05554db3f6f9fb46f4f3bb44d7c104ae0e664f4f829a83ca234c922a0cbce | Triage

Sharing

General

Target

JaffaCakes118_609d68f9309c205f387b525e98f2a010
Size

2KB
Sample

250101-zq3n7swmbp
MD5

609d68f9309c205f387b525e98f2a010
SHA1

b3f13b36c88c2a4f676e47a4811f579fad7bc650
SHA256

16a05554db3f6f9fb46f4f3bb44d7c104ae0e664f4f829a83ca234c922a0cbce
SHA512

d268f50d9db15b964925fc1db8fa504e1e575205461bef6145ca62ee0fe874248528ab59acf3818424b9571bc8ebc90069ca86693758d4b8bf6d18df1c41e5af

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

3.196.132.205:12095

Targets

- Target
  
  JaffaCakes118_609d68f9309c205f387b525e98f2a010
- Size
  
  2KB
- MD5
  
  609d68f9309c205f387b525e98f2a010
- SHA1
  
  b3f13b36c88c2a4f676e47a4811f579fad7bc650
- SHA256
  
  16a05554db3f6f9fb46f4f3bb44d7c104ae0e664f4f829a83ca234c922a0cbce
- SHA512
  
  d268f50d9db15b964925fc1db8fa504e1e575205461bef6145ca62ee0fe874248528ab59acf3818424b9571bc8ebc90069ca86693758d4b8bf6d18df1c41e5af
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan