metasploit

General

Target

14bd8ce373bf64dc8f78775f284ce5449cc350796a4b53c27505c4f9bcba0379
Size

51KB
Sample

220602-xftx7saag6
MD5

577eab90797f2804a44cce6241eb9c22
SHA1

6bee48fb567b6f0acc2cd129741f0351b961c89f
SHA256

14bd8ce373bf64dc8f78775f284ce5449cc350796a4b53c27505c4f9bcba0379
SHA512

e5a5140424c5dcfccd2dafc34bdf2232dd2d046dd933f47053b9278ccf1f67e3a61110da0c81c9f419a42a0a4538c97c5dba1b8a6dba800d0186b69a07d9770c

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://191.101.42.179:8080/HxJOy7n0CJvydvN3qZ2FLgqSDe-upNDe0J0Ts0S_QVE3U8qmdyykRSnD6T_HvD7La8DNmDu0GFUno6sSH6E1kyH1KFLrK-sU2mx6mwqnG4gBWa7BSH61LeWes6_ip9ijxEIdPAmYbrc9mOjG3ohA4KJrSn_hMCCfI9Pc_7hBhp

Targets

- Target
  
  14bd8ce373bf64dc8f78775f284ce5449cc350796a4b53c27505c4f9bcba0379
- Size
  
  51KB
- MD5
  
  577eab90797f2804a44cce6241eb9c22
- SHA1
  
  6bee48fb567b6f0acc2cd129741f0351b961c89f
- SHA256
  
  14bd8ce373bf64dc8f78775f284ce5449cc350796a4b53c27505c4f9bcba0379
- SHA512
  
  e5a5140424c5dcfccd2dafc34bdf2232dd2d046dd933f47053b9278ccf1f67e3a61110da0c81c9f419a42a0a4538c97c5dba1b8a6dba800d0186b69a07d9770c
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Query Registry

2

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2