metasploit | 79047e9029635c13f40ec2baa0dc99f9fb1804a86e21446d7d31df6a83224df1 | Triage

Sharing

General

Target

JaffaCakes118_89b379f3abcb3d93a39eb35b7b966a4e
Size

37KB
Sample

250327-mxevhasq12
MD5

89b379f3abcb3d93a39eb35b7b966a4e
SHA1

6c1f9efc538ef57879eb42fa149528d43f33607e
SHA256

79047e9029635c13f40ec2baa0dc99f9fb1804a86e21446d7d31df6a83224df1
SHA512

258ea7b8d8cd5ec560afcd24a77bee12e21be587ece2be0f3e2fe28c49c612cd9958dced3f5f5dcfd6f3de077d4fa230f5c9ac03fe3adc191874b4de724af500
SSDEEP

768:c5VAOSpSz2b8+1XUIOhRO70Kc0TNIMsKPs6lRZ95x:c3YIs8pqwn0JIMX7h5x

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

172.16.60.1:4768

Targets

- Target
  
  JaffaCakes118_89b379f3abcb3d93a39eb35b7b966a4e
- Size
  
  37KB
- MD5
  
  89b379f3abcb3d93a39eb35b7b966a4e
- SHA1
  
  6c1f9efc538ef57879eb42fa149528d43f33607e
- SHA256
  
  79047e9029635c13f40ec2baa0dc99f9fb1804a86e21446d7d31df6a83224df1
- SHA512
  
  258ea7b8d8cd5ec560afcd24a77bee12e21be587ece2be0f3e2fe28c49c612cd9958dced3f5f5dcfd6f3de077d4fa230f5c9ac03fe3adc191874b4de724af500
- SSDEEP
  
  768:c5VAOSpSz2b8+1XUIOhRO70Kc0TNIMsKPs6lRZ95x:c3YIs8pqwn0JIMX7h5x
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan