metasploit

General

Target

a48f54f9662114134a49156e73af2c0d
Size

152KB
Sample

220825-x3w13shffn
MD5

a48f54f9662114134a49156e73af2c0d
SHA1

bbada41236e037aa2cd9b1b2c78b6f69f5d88e5e
SHA256

2128469422c9897b5e4b87d3a4bba88522fcf3f74f2ee9473d6c7335f035882f
SHA512

eebd3123eeea84d6f28c42ef0774531547ac585d0e863a833a751f9e66c3e54bc608062ff02bbddd77c9a19e39c70f6819805acc9fadb718d875db9d1c35a511
SSDEEP

3072:iNG4Di5bDMiHuKWanS+6+TJOBuh20asKHPzc0EodOwVfwJnm9C6GRyz:6O5bDMiHuISR+IBuh1PKHPzDdb8m9l9

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://sscweb.dyndns.info:1234/k3BFpJvgrTbNuMy5r0LLZQKYQ85t88utddGXU9Y3pPMQ84CRtCb-Bum5C-BsPXFQ5AGpb0qLTqjMHYVReIH7ZpvDcVKnMUslD20Zox30dXFPeth

Targets

- Target
  
  download.docm
- Size
  
  83KB
- MD5
  
  5d8895658f591ef763911318426625b5
- SHA1
  
  70ec05bc05d088ea80c1cca506de8c7a32b6ccf3
- SHA256
  
  cce9741afca6a6094f337f53fd404f662561f4e1eae6ae18928ef18060edf559
- SHA512
  
  5095c62bc1687443c55d820aeb2fab5099ee7f7d1d2a08dd1583d2276a4beca96f5fb2b6b52b06e01ca47814818e81bb93fd517cf5ec92abc0f323aee7e8583f
- SSDEEP
  
  1536:Yl+WqQuctgdemxX7vORvXgCwofTAgGJlQLU3mNIVq4l4ovyi2OXClu:++X8YVLvQgFCxYQLYI4l4PbOC4
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Query Registry

2

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2