metasploit | 94cf0aeb4354008f4944204fe1b8108e50abcef3f3915e931d6e8e0a05631faa | Triage

Sharing

General

Target

94cf0aeb4354008f4944204fe1b8108e50abcef3f3915e931d6e8e0a05631faa
Size

14KB
Sample

240420-srlzhsbd84
MD5

050bf1e137d4897d6203347aa95eec69
SHA1

e995069f308b3d71d3f7a7bb0d55a6a168d46842
SHA256

94cf0aeb4354008f4944204fe1b8108e50abcef3f3915e931d6e8e0a05631faa
SHA512

136cf76892611795aec3c5fe3bb5019f47f046ef5784a450011828d8238f344e3b612104b9bde4e55ed21516eec4d0e6f09745313730ae195020fc0808fe90b5
SSDEEP

192:63mbPYCfMcrfOIuZmvKQxtzlSIVX6NOjeLnejDMN1:xMCfrfQ6tBSIAeUN1

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.190.135:80/9Tbm

Attributes

headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; Xbox)

Targets

- Target
  
  94cf0aeb4354008f4944204fe1b8108e50abcef3f3915e931d6e8e0a05631faa
- Size
  
  14KB
- MD5
  
  050bf1e137d4897d6203347aa95eec69
- SHA1
  
  e995069f308b3d71d3f7a7bb0d55a6a168d46842
- SHA256
  
  94cf0aeb4354008f4944204fe1b8108e50abcef3f3915e931d6e8e0a05631faa
- SHA512
  
  136cf76892611795aec3c5fe3bb5019f47f046ef5784a450011828d8238f344e3b612104b9bde4e55ed21516eec4d0e6f09745313730ae195020fc0808fe90b5
- SSDEEP
  
  192:63mbPYCfMcrfOIuZmvKQxtzlSIVX6NOjeLnejDMN1:xMCfrfQ6tBSIAeUN1
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan