metasploit | b9e59db23e9800509f02cf842a8a97761d07ebe73fc1b4823625191a7964ee10 | Triage

Sharing

General

Target

b9e59db23e9800509f02cf842a8a97761d07ebe73fc1b4823625191a7964ee10
Size

472KB
Sample

221203-g9tljafe4z
MD5

5a981b419d7a9845e01f85b9bfad02d5
SHA1

3254ed31cc887ad70d9bf3945b251d26076bc74f
SHA256

b9e59db23e9800509f02cf842a8a97761d07ebe73fc1b4823625191a7964ee10
SHA512

0e8f0d898935442eaf6853b3f75c483bccf3c5626b3c75013cd73cb6779dbdde910dcbab306a70fcd1c8dfc315645c60122b35675fc923e0fb931333e81d570c
SSDEEP

12288:U8pJgJ3mK0hgsa1BEtUFy5m6DTGknV6I:BcJ3mJWsudym6DqkV6

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

213.7.104.181:443

Targets

- Target
  
  b9e59db23e9800509f02cf842a8a97761d07ebe73fc1b4823625191a7964ee10
- Size
  
  472KB
- MD5
  
  5a981b419d7a9845e01f85b9bfad02d5
- SHA1
  
  3254ed31cc887ad70d9bf3945b251d26076bc74f
- SHA256
  
  b9e59db23e9800509f02cf842a8a97761d07ebe73fc1b4823625191a7964ee10
- SHA512
  
  0e8f0d898935442eaf6853b3f75c483bccf3c5626b3c75013cd73cb6779dbdde910dcbab306a70fcd1c8dfc315645c60122b35675fc923e0fb931333e81d570c
- SSDEEP
  
  12288:U8pJgJ3mK0hgsa1BEtUFy5m6DTGknV6I:BcJ3mJWsudym6DqkV6
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan