metasploit | 3b955c84d26a3f53f157ccfb5a1c9ce4426972e5c9415982cdc5522b8e09290f | Triage

Sharing

General

Target

JaffaCakes118_b890754b74bb8e49cbf4d3a5b4569dd5
Size

72KB
Sample

250414-wl1r9swpv5
MD5

b890754b74bb8e49cbf4d3a5b4569dd5
SHA1

29bef8b8430059ac08894352a48666bdc9558303
SHA256

3b955c84d26a3f53f157ccfb5a1c9ce4426972e5c9415982cdc5522b8e09290f
SHA512

da54670e711cf7cb1222213f42420eec16f80b8fae8dd46d51c8cc80595319815f7ac7e2a34344706cfed433d401aff1562281d0e69766c4d94c376fdd8751c1
SSDEEP

1536:IrUgTrQoiIEaUMNS4t7vyc42QC9vD7tBmMMb+KR0Nc8QsJq39:yU8xivaUM17vN42VtBe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.76.128:4444

Targets

- Target
  
  JaffaCakes118_b890754b74bb8e49cbf4d3a5b4569dd5
- Size
  
  72KB
- MD5
  
  b890754b74bb8e49cbf4d3a5b4569dd5
- SHA1
  
  29bef8b8430059ac08894352a48666bdc9558303
- SHA256
  
  3b955c84d26a3f53f157ccfb5a1c9ce4426972e5c9415982cdc5522b8e09290f
- SHA512
  
  da54670e711cf7cb1222213f42420eec16f80b8fae8dd46d51c8cc80595319815f7ac7e2a34344706cfed433d401aff1562281d0e69766c4d94c376fdd8751c1
- SSDEEP
  
  1536:IrUgTrQoiIEaUMNS4t7vyc42QC9vD7tBmMMb+KR0Nc8QsJq39:yU8xivaUM17vN42VtBe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan