metasploit | 0a258972aeca0d41b50482587041fe591d68c971ca0c72124dd64d31d7ba5e71 | Triage

Sharing

General

Target

0a258972aeca0d41b50482587041fe591d68c971ca0c72124dd64d31d7ba5e71
Size

72KB
Sample

240418-w9vwxsbf54
MD5

a03122055e4018686e61bd7ebccf743e
SHA1

15900875072964d94c236e0b1e7d7d06105f1ed3
SHA256

0a258972aeca0d41b50482587041fe591d68c971ca0c72124dd64d31d7ba5e71
SHA512

450941b2eb3c8e41651fe1d14d3b9b3183ba1410c77aabaa3446917160a8a7b11533da9badf23131a74374181efc98e3d19033ccd494b4bc3558d3cdb782636d
SSDEEP

1536:IOIfhU91Gyg7P1pHIgHK3Vepbl+wu3lbDM/cn3CMb+KR0Nc8QsJq39:gfRv9MS+wmDMUnye0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

73.205.35.72:50608

Targets

- Target
  
  0a258972aeca0d41b50482587041fe591d68c971ca0c72124dd64d31d7ba5e71
- Size
  
  72KB
- MD5
  
  a03122055e4018686e61bd7ebccf743e
- SHA1
  
  15900875072964d94c236e0b1e7d7d06105f1ed3
- SHA256
  
  0a258972aeca0d41b50482587041fe591d68c971ca0c72124dd64d31d7ba5e71
- SHA512
  
  450941b2eb3c8e41651fe1d14d3b9b3183ba1410c77aabaa3446917160a8a7b11533da9badf23131a74374181efc98e3d19033ccd494b4bc3558d3cdb782636d
- SSDEEP
  
  1536:IOIfhU91Gyg7P1pHIgHK3Vepbl+wu3lbDM/cn3CMb+KR0Nc8QsJq39:gfRv9MS+wmDMUnye0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan