metasploit

General

Target
0e88c881a1870293eb05c853da217161
Size 59KB
Sample231230-e48r6afhe6
SHA256 e6620a4e6a247b550ae91dd362dbca018ab0c621c0982e20c4e714e431dbd1ff
MD5 0e88c881a1870293eb05c853da217161
SHA1 c5ebcac5e716593105b07a10d17ec4fbd57f9dbe
SHA512 bc3fbd241a3c495fa14ccd149c6b26d1fb6f951eb7a3b5a1c34bb999f87544b3f71353b8c4fa6085987d12522024c199da5036a93235421c8daf404f5dfd8736
SSDEEP 1536:TLcUj5jhCtTbZNBQ66R+R4RrYlDYkRpCIHG7upfNxy5yd:TQUFjhCtXZN+hRe4qJYOpLG7OfNxyId
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.0.144:443/AXGDO

Targets

- Target
  0e88c881a1870293eb05c853da217161
- Size 59KB
- SHA256 e6620a4e6a247b550ae91dd362dbca018ab0c621c0982e20c4e714e431dbd1ff
- MD5 0e88c881a1870293eb05c853da217161
- SHA1 c5ebcac5e716593105b07a10d17ec4fbd57f9dbe
- SHA512 bc3fbd241a3c495fa14ccd149c6b26d1fb6f951eb7a3b5a1c34bb999f87544b3f71353b8c4fa6085987d12522024c199da5036a93235421c8daf404f5dfd8736
- SSDEEP 1536:TLcUj5jhCtTbZNBQ66R+R4RrYlDYkRpCIHG7upfNxy5yd:TQUFjhCtXZN+hRe4qJYOpLG7OfNxyId
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  form.pdf
- Size 72KB
- SHA256 6d9eb5f30c7f72e692ed3c3da129835e3a25d493cc4ced10f6053f78eec7d8f8
- MD5 aa8a3087cacfee8f9e342ac92e8ce58c
- SHA1 181279dafd8bf825ea8e647016026daa913afd4d
- SHA512 9c5920a7220e816ac3bd00634568ffe7d9074aeb45f16f49567a8aaf26bda6a186f765c3ba893b51ea426025d42bb3284801d5749aa764df40199503179a2cd2
- SSDEEP 1536:I+CkF2TdSqChYh5+qXr/Nbge3rZdsYzYSnnT+xMb+KR0Nc8QsJq39:YZRlxhqYfnnEe0Nc8QsC9
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4