metasploit

General

Target

bf6146957bfcc10ee8a284e1e8c1bfeb3330593ce3eac4187d9871a46e94297f
Size

132KB
Sample

220510-wdak4sdgf5
MD5

16ccf895c611653f2a66382197c07e0e
SHA1

7a5ceee5c6529c73896576f784fa928772420d53
SHA256

bf6146957bfcc10ee8a284e1e8c1bfeb3330593ce3eac4187d9871a46e94297f
SHA512

d8d2b49be5a3e9d488641901d69666952e846d8321a31afe31d2469c3bc8d81ca8f874c3c2d8794a6b440a384d92631a7e205bfa2e9f4169f3343e73a48a236e

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.1.104:4443/uS5IL2wUHPkVVRRUSicq6Qe411BGLKmICQrPFFVNmJ9MzHeUQP8tdis96mz3EDdFp1kvEC5_BDPOpJIxZHFW1lrr-raGFGTKsNRDgYETKTImtafjAhSf1yIJM7PUF1FO3N3dvO5ZRqc55-zlcwgkx1jasZFOdL6TxbTTAVMLyS40rcJfBtul1dpYesb8U6AMXzqW76qa19B94C9p9se05SRqa-wdcno

Targets

- Target
  
  bf6146957bfcc10ee8a284e1e8c1bfeb3330593ce3eac4187d9871a46e94297f
- Size
  
  132KB
- MD5
  
  16ccf895c611653f2a66382197c07e0e
- SHA1
  
  7a5ceee5c6529c73896576f784fa928772420d53
- SHA256
  
  bf6146957bfcc10ee8a284e1e8c1bfeb3330593ce3eac4187d9871a46e94297f
- SHA512
  
  d8d2b49be5a3e9d488641901d69666952e846d8321a31afe31d2469c3bc8d81ca8f874c3c2d8794a6b440a384d92631a7e205bfa2e9f4169f3343e73a48a236e
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2