metasploit | e61039af40cb17c28aaf3d75e4332e5b070ebfd91b7c7891f8b38d4bbe4f39e8 | Triage

Sharing

General

Target

e61039af40cb17c28aaf3d75e4332e5b070ebfd91b7c7891f8b38d4bbe4f39e8
Size

3.2MB
Sample

240420-rnk3daae23
MD5

145f0ccb4a3ac4a798ed7352825dfed0
SHA1

3d6d72f2f1d86b82be7b8f4a840954db61508639
SHA256

e61039af40cb17c28aaf3d75e4332e5b070ebfd91b7c7891f8b38d4bbe4f39e8
SHA512

66abba6b019f21f8f3a7f8e8b26931909759fc5f442ffc5b66b332e8bfbdcaef744a2f8a1b68fa5954d5766e03d340cee1cbc7f1ffcd0a2cc25b877e280eb297
SSDEEP

98304:owOBfKtpt+7+KfLzHiN/iYttBMqjkqDDc:NN+CWzCN/ikuqjkS

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.5.132:4444

Targets

- Target
  
  e61039af40cb17c28aaf3d75e4332e5b070ebfd91b7c7891f8b38d4bbe4f39e8
- Size
  
  3.2MB
- MD5
  
  145f0ccb4a3ac4a798ed7352825dfed0
- SHA1
  
  3d6d72f2f1d86b82be7b8f4a840954db61508639
- SHA256
  
  e61039af40cb17c28aaf3d75e4332e5b070ebfd91b7c7891f8b38d4bbe4f39e8
- SHA512
  
  66abba6b019f21f8f3a7f8e8b26931909759fc5f442ffc5b66b332e8bfbdcaef744a2f8a1b68fa5954d5766e03d340cee1cbc7f1ffcd0a2cc25b877e280eb297
- SSDEEP
  
  98304:owOBfKtpt+7+KfLzHiN/iYttBMqjkqDDc:NN+CWzCN/ikuqjkS
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan