metasploit | 0d81bacd70a1bee5ce6deaad6c5a94293987f514933e03c64c1c67302b8f17d9 | Triage

Sharing

General

Target

JaffaCakes118_6d91c5b19d31883725b04712ae31f490
Size

72KB
Sample

250103-spqjxstkhj
MD5

6d91c5b19d31883725b04712ae31f490
SHA1

6e7af175c87b59a4164435020a0a9481839d3c7e
SHA256

0d81bacd70a1bee5ce6deaad6c5a94293987f514933e03c64c1c67302b8f17d9
SHA512

ea9da95963ea2947d7ef42b247b1d3e7b28969bb36acf896ffdac17ad06f63e716f9d2f3d42dc751b45a42a19f2fb737922b7faf81da59dd72ab5c24db57783e
SSDEEP

1536:InbpduSmQ1WU5YKnLT6cpjB4dIotVlZsMb+KR0Nc8QsJq39:GbbuSmXOByzZse0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.8:4444

Targets

- Target
  
  JaffaCakes118_6d91c5b19d31883725b04712ae31f490
- Size
  
  72KB
- MD5
  
  6d91c5b19d31883725b04712ae31f490
- SHA1
  
  6e7af175c87b59a4164435020a0a9481839d3c7e
- SHA256
  
  0d81bacd70a1bee5ce6deaad6c5a94293987f514933e03c64c1c67302b8f17d9
- SHA512
  
  ea9da95963ea2947d7ef42b247b1d3e7b28969bb36acf896ffdac17ad06f63e716f9d2f3d42dc751b45a42a19f2fb737922b7faf81da59dd72ab5c24db57783e
- SSDEEP
  
  1536:InbpduSmQ1WU5YKnLT6cpjB4dIotVlZsMb+KR0Nc8QsJq39:GbbuSmXOByzZse0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan