metasploit | 5e4f200c05cf2b69c7f1708fa9ef5c8039ad7c7e5ba62f202746d6c61d5fc8f5 | Triage

Sharing

General

Target

5e4f200c05cf2b69c7f1708fa9ef5c8039ad7c7e5ba62f202746d6c61d5fc8f5
Size

72KB
Sample

240422-2fv8gshc23
MD5

1790ec4a9f786cbdb84dfc3f54da73a0
SHA1

eee0317ece5129933f32539795be9bdfb4548565
SHA256

5e4f200c05cf2b69c7f1708fa9ef5c8039ad7c7e5ba62f202746d6c61d5fc8f5
SHA512

bf33a8e3b7946cdeb8838fb9efad9e5de7622787a6f4bf864bbedfb445e1232530515785df3e383984897676e3e6e8dcc0f6a4d587539e77b4f969e1d3dd1900
SSDEEP

1536:IF4AgWs/N3PHHjIkaDSkeMb+KR0Nc8QsJq39:igbF3PnEpee0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

145.13.154.105:35979

Targets

- Target
  
  5e4f200c05cf2b69c7f1708fa9ef5c8039ad7c7e5ba62f202746d6c61d5fc8f5
- Size
  
  72KB
- MD5
  
  1790ec4a9f786cbdb84dfc3f54da73a0
- SHA1
  
  eee0317ece5129933f32539795be9bdfb4548565
- SHA256
  
  5e4f200c05cf2b69c7f1708fa9ef5c8039ad7c7e5ba62f202746d6c61d5fc8f5
- SHA512
  
  bf33a8e3b7946cdeb8838fb9efad9e5de7622787a6f4bf864bbedfb445e1232530515785df3e383984897676e3e6e8dcc0f6a4d587539e77b4f969e1d3dd1900
- SSDEEP
  
  1536:IF4AgWs/N3PHHjIkaDSkeMb+KR0Nc8QsJq39:igbF3PnEpee0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan