metasploit | 8b81a754f629a803e7b4e9a859f61bf773a39b3882a4ee6f955ab5f081ff4240 | Triage

Sharing

General

Target

JaffaCakes118_957349608fafdb12cb3e1ccf90dd6d60
Size

1024B
Sample

250329-yem9pstzgv
MD5

957349608fafdb12cb3e1ccf90dd6d60
SHA1

848bae82c1c1cecbc67dcb01fb84b4e5719fffeb
SHA256

8b81a754f629a803e7b4e9a859f61bf773a39b3882a4ee6f955ab5f081ff4240
SHA512

2761593b7563b1d73758c69f1c5c734c398161d00ed312c0b99d6c860a5f3434be6bd3808837f8aff207ccb052fcfc83f29a5690159b3ea0f9ac9ce453238f5f

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.251.252.237:4445

Targets

- Target
  
  JaffaCakes118_957349608fafdb12cb3e1ccf90dd6d60
- Size
  
  1024B
- MD5
  
  957349608fafdb12cb3e1ccf90dd6d60
- SHA1
  
  848bae82c1c1cecbc67dcb01fb84b4e5719fffeb
- SHA256
  
  8b81a754f629a803e7b4e9a859f61bf773a39b3882a4ee6f955ab5f081ff4240
- SHA512
  
  2761593b7563b1d73758c69f1c5c734c398161d00ed312c0b99d6c860a5f3434be6bd3808837f8aff207ccb052fcfc83f29a5690159b3ea0f9ac9ce453238f5f
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan