metasploit | 91f7d9101481479efdf24ebd114b4fc943b5a7f1ab1efa4f8537485e14f68b5d | Triage

Sharing

General

Target

JaffaCakes118_bb55ff34ad7785714d39c7b98c01ed9c
Size

85KB
Sample

250417-1x5yksvrx8
MD5

bb55ff34ad7785714d39c7b98c01ed9c
SHA1

2b081b5a8906e115d7bc091fd5fbb4d7f4b67992
SHA256

91f7d9101481479efdf24ebd114b4fc943b5a7f1ab1efa4f8537485e14f68b5d
SHA512

604027acd8b065a1c2c9df3edec6f4fe824c8264f986fff8ccc777ef6d0df15e45c1ca39c0632a139cd4afabe73c5f2357bbfd9156ff8b5c2ed09a143ed3154a
SSDEEP

768:IUvCkLUfrU6cLDdj0qqbhjtOI8pp6F4KJe6R4ZU9qZU9y:IUTLu6zqb94+R4pl

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

75.185.160.48:31337

Targets

- Target
  
  JaffaCakes118_bb55ff34ad7785714d39c7b98c01ed9c
- Size
  
  85KB
- MD5
  
  bb55ff34ad7785714d39c7b98c01ed9c
- SHA1
  
  2b081b5a8906e115d7bc091fd5fbb4d7f4b67992
- SHA256
  
  91f7d9101481479efdf24ebd114b4fc943b5a7f1ab1efa4f8537485e14f68b5d
- SHA512
  
  604027acd8b065a1c2c9df3edec6f4fe824c8264f986fff8ccc777ef6d0df15e45c1ca39c0632a139cd4afabe73c5f2357bbfd9156ff8b5c2ed09a143ed3154a
- SSDEEP
  
  768:IUvCkLUfrU6cLDdj0qqbhjtOI8pp6F4KJe6R4ZU9qZU9y:IUTLu6zqb94+R4pl
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan