metasploit | f15491b940bdf60bc4e906b0c333ea3f7a7f38079a906b80a212901eb5ce0152 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
f15491b940bdf60bc4e906b0c333ea3f7a7f38079a906b80a212901eb5ce0152
Size 31KB
Sample200828-gd3t7112be
SHA256 f15491b940bdf60bc4e906b0c333ea3f7a7f38079a906b80a212901eb5ce0152
MD5 1d23fda707bb98d2c596a7919c1ae5ad
SHA1 28d20adf51d71d7d618aea1b3e007c0f5b4deb88
SHA512 fdd6d173f502a82284a6f9eaf70a4388713adc97419d9d7cdfd95a30fbad58e53cc72ad0ed026dfbe75f3069ab25ddbfbb326a3b218c3fb010cafe8c75a96527
MD5 SHA1 SHA512

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://104.233.224.237:4389/vv79

Attributes

headers User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0

Targets

- Target
  f15491b940bdf60bc4e906b0c333ea3f7a7f38079a906b80a212901eb5ce0152
- Size 31KB
- SHA256 f15491b940bdf60bc4e906b0c333ea3f7a7f38079a906b80a212901eb5ce0152
- MD5 1d23fda707bb98d2c596a7919c1ae5ad
- SHA1 28d20adf51d71d7d618aea1b3e007c0f5b4deb88
- SHA512 fdd6d173f502a82284a6f9eaf70a4388713adc97419d9d7cdfd95a30fbad58e53cc72ad0ed026dfbe75f3069ab25ddbfbb326a3b218c3fb010cafe8c75a96527
- MD5 SHA1 SHA512
Score

10^/10

trojan backdoor metasploit
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

trojanbackdoormetasploit

behavioral2

trojanbackdoormetasploit