metasploit | 0e021d5148beb6bcd21b0ae3d201960b199233d1b8bcfd1572c5b2a307a81b2a | Triage

Sharing

General

Target

JaffaCakes118_0451191c149bfb266b6eafa379f61471
Size

72KB
Sample

250121-nwfk3ssmap
MD5

0451191c149bfb266b6eafa379f61471
SHA1

7eb174fc90217656314bed6dc36eab08510751f9
SHA256

0e021d5148beb6bcd21b0ae3d201960b199233d1b8bcfd1572c5b2a307a81b2a
SHA512

c70b41ad1c3d49b28b88a66ba3f02a120cad3986f75d1bfad6670730caab4565cc429bac17a3e4a42e1f19c9e85a6553da33cca4b9f08d51c28d9cdbf6739ff0
SSDEEP

1536:IirMAXp+GWMCYdpuhXsJ/SluooEJMb+KR0Nc8QsJq39:DrNXp+L2pNBoooe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  
  JaffaCakes118_0451191c149bfb266b6eafa379f61471
- Size
  
  72KB
- MD5
  
  0451191c149bfb266b6eafa379f61471
- SHA1
  
  7eb174fc90217656314bed6dc36eab08510751f9
- SHA256
  
  0e021d5148beb6bcd21b0ae3d201960b199233d1b8bcfd1572c5b2a307a81b2a
- SHA512
  
  c70b41ad1c3d49b28b88a66ba3f02a120cad3986f75d1bfad6670730caab4565cc429bac17a3e4a42e1f19c9e85a6553da33cca4b9f08d51c28d9cdbf6739ff0
- SSDEEP
  
  1536:IirMAXp+GWMCYdpuhXsJ/SluooEJMb+KR0Nc8QsJq39:DrNXp+L2pNBoooe0Nc8QsC9
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan