metasploit | 0e6535a9fed25e09a4eb76efddee6c03666ba79c798f62ebd2ed2a9519dce441 | Triage

Sharing

General

Target

JaffaCakes118_971e8040a52ba86c1b9e8243b52b7a0a
Size

72KB
Sample

250329-ywyf1asj12
MD5

971e8040a52ba86c1b9e8243b52b7a0a
SHA1

13853330756cc0ab2bb8f843a264aa6038875aad
SHA256

0e6535a9fed25e09a4eb76efddee6c03666ba79c798f62ebd2ed2a9519dce441
SHA512

38f376fb94dc6d023ba9053be4e7dd548ffe2dda00380e230c4dcc50cebedc75b1c103c57186f154a0464112e6adaadaaed3674dff23f26e5c12af411795c3e3
SSDEEP

1536:IhIAKxxBdekB3mfCQ0FW3uvks/oIZd/W58mqwQMb+KR0Nc8QsJq39:IIAKxx/e63FQJwjNu8mxQe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.66:4444

Targets

- Target
  
  JaffaCakes118_971e8040a52ba86c1b9e8243b52b7a0a
- Size
  
  72KB
- MD5
  
  971e8040a52ba86c1b9e8243b52b7a0a
- SHA1
  
  13853330756cc0ab2bb8f843a264aa6038875aad
- SHA256
  
  0e6535a9fed25e09a4eb76efddee6c03666ba79c798f62ebd2ed2a9519dce441
- SHA512
  
  38f376fb94dc6d023ba9053be4e7dd548ffe2dda00380e230c4dcc50cebedc75b1c103c57186f154a0464112e6adaadaaed3674dff23f26e5c12af411795c3e3
- SSDEEP
  
  1536:IhIAKxxBdekB3mfCQ0FW3uvks/oIZd/W58mqwQMb+KR0Nc8QsJq39:IIAKxx/e63FQJwjNu8mxQe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan