metasploit | 61570a3fc5e4cbeb2cecb779f64b8751089f9ca199f29b59033c99551edd67d3 | Triage

Sharing

General

Target

JaffaCakes118_9912944fe871fd2f06a678b6e48c9d76
Size

37KB
Sample

250330-ytp2vayjx9
MD5

9912944fe871fd2f06a678b6e48c9d76
SHA1

6677663408f646f9f634c4e5a38cab6722b55331
SHA256

61570a3fc5e4cbeb2cecb779f64b8751089f9ca199f29b59033c99551edd67d3
SHA512

28deaf6ea17099649221ad6267725e6a879358b04bbd99bdd98bf5a2409dceb2f0c64b8454bbe1476f758a830663fb648ebba627b4dd136ddfad3c5d9e823036
SSDEEP

768:8VAISMnh2TCAIG7bL7ApHqLPNPaJezS6lRZ95x:2qY9GkFwlPaY9h5x

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

78.251.238.60:47821

Targets

- Target
  
  JaffaCakes118_9912944fe871fd2f06a678b6e48c9d76
- Size
  
  37KB
- MD5
  
  9912944fe871fd2f06a678b6e48c9d76
- SHA1
  
  6677663408f646f9f634c4e5a38cab6722b55331
- SHA256
  
  61570a3fc5e4cbeb2cecb779f64b8751089f9ca199f29b59033c99551edd67d3
- SHA512
  
  28deaf6ea17099649221ad6267725e6a879358b04bbd99bdd98bf5a2409dceb2f0c64b8454bbe1476f758a830663fb648ebba627b4dd136ddfad3c5d9e823036
- SSDEEP
  
  768:8VAISMnh2TCAIG7bL7ApHqLPNPaJezS6lRZ95x:2qY9GkFwlPaY9h5x
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan