metasploit | 04a024a09beeffda4ffcde2848985a5b5cfa204299dbd23dcaf08d45275edcfa | Triage

Sharing

General

Target

04a024a09beeffda4ffcde2848985a5b5cfa204299dbd23dcaf08d45275edcfa
Size

11.4MB
Sample

240418-wxn8lscd2z
MD5

97cd0470db1d5ae96552c7f71401f92d
SHA1

292a180be41e31eba43e50f3faac2981afc8b3f4
SHA256

04a024a09beeffda4ffcde2848985a5b5cfa204299dbd23dcaf08d45275edcfa
SHA512

a41a8722d182970b72a9e56fb889d72def4c688d51955c6748062dab3669221c351301b0ff4926e539019bd1f4edf149f7ebc7e93d289178cabf10c22167b94a
SSDEEP

196608:TOGmYip8vL1LBBeVijuqyDorVOOXAsb/tWVT3jX4I+7R6rqN42RKtJA:yGpM8vBLBgdqLL4D4v6rqNg4

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.105.129:9000

Targets

- Target
  
  04a024a09beeffda4ffcde2848985a5b5cfa204299dbd23dcaf08d45275edcfa
- Size
  
  11.4MB
- MD5
  
  97cd0470db1d5ae96552c7f71401f92d
- SHA1
  
  292a180be41e31eba43e50f3faac2981afc8b3f4
- SHA256
  
  04a024a09beeffda4ffcde2848985a5b5cfa204299dbd23dcaf08d45275edcfa
- SHA512
  
  a41a8722d182970b72a9e56fb889d72def4c688d51955c6748062dab3669221c351301b0ff4926e539019bd1f4edf149f7ebc7e93d289178cabf10c22167b94a
- SSDEEP
  
  196608:TOGmYip8vL1LBBeVijuqyDorVOOXAsb/tWVT3jX4I+7R6rqN42RKtJA:yGpM8vBLBgdqLL4D4v6rqNg4
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan