metasploit | b3816df5534c50d33ec4984a99b92988318445d536dc4ace7d20b2fa08d9b84b | Triage

Sharing

General

Target

JaffaCakes118_0153077020cc34c2d2435ed018684a6f
Size

69KB
Sample

250121-cmd54s1khk
MD5

0153077020cc34c2d2435ed018684a6f
SHA1

814fdd06ca8d7083190a1f76b1b036525f906650
SHA256

b3816df5534c50d33ec4984a99b92988318445d536dc4ace7d20b2fa08d9b84b
SHA512

9b17f5e9b5ef92185c1e7477c0885363935b6b7f61b713e87887d497c686c0fc4a0c48d6274a7ad97cf237bd921404374b94ce1f087ef7eeb11fcf361cfa7cff
SSDEEP

1536:rdZs01pwqsW33JMvUSHxb8ShHsC8qt4REKm9IRPSqEjbYd2fwAlur0chZi5w26BF:L

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.13:1401

Targets

- Target
  
  JaffaCakes118_0153077020cc34c2d2435ed018684a6f
- Size
  
  69KB
- MD5
  
  0153077020cc34c2d2435ed018684a6f
- SHA1
  
  814fdd06ca8d7083190a1f76b1b036525f906650
- SHA256
  
  b3816df5534c50d33ec4984a99b92988318445d536dc4ace7d20b2fa08d9b84b
- SHA512
  
  9b17f5e9b5ef92185c1e7477c0885363935b6b7f61b713e87887d497c686c0fc4a0c48d6274a7ad97cf237bd921404374b94ce1f087ef7eeb11fcf361cfa7cff
- SSDEEP
  
  1536:rdZs01pwqsW33JMvUSHxb8ShHsC8qt4REKm9IRPSqEjbYd2fwAlur0chZi5w26BF:L
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan