metasploit | d4cae88447f83dac9a32e1b6cadc70aeb3a898beea87d474c1b8318ca0423b5d | Triage

Sharing

General

Target

d4cae88447f83dac9a32e1b6cadc70aeb3a898beea87d474c1b8318ca0423b5d
Size

72KB
Sample

240424-z5j6eahg5v
MD5

90bcf15111c3d934a7e9e755afda2c87
SHA1

0eb2017b06e1abbc21dec9b7380292c97a79b0e0
SHA256

d4cae88447f83dac9a32e1b6cadc70aeb3a898beea87d474c1b8318ca0423b5d
SHA512

3fe462ded713d048e3556ff41a07a3a4e4d8c09840eb5c6c41aaf9c13a127532932c86d4fae2dd5232831f83996eefa2df7f744dd3d5913685e5f74c26ac3abb
SSDEEP

1536:IAGQu9p8DvTJyjvNtgGe9vxsAwizZZG3MMb+KR0Nc8QsJq39:oQgp8jAtg3tZEMe0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

56.156.230.241:3538

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  
  d4cae88447f83dac9a32e1b6cadc70aeb3a898beea87d474c1b8318ca0423b5d
- Size
  
  72KB
- MD5
  
  90bcf15111c3d934a7e9e755afda2c87
- SHA1
  
  0eb2017b06e1abbc21dec9b7380292c97a79b0e0
- SHA256
  
  d4cae88447f83dac9a32e1b6cadc70aeb3a898beea87d474c1b8318ca0423b5d
- SHA512
  
  3fe462ded713d048e3556ff41a07a3a4e4d8c09840eb5c6c41aaf9c13a127532932c86d4fae2dd5232831f83996eefa2df7f744dd3d5913685e5f74c26ac3abb
- SSDEEP
  
  1536:IAGQu9p8DvTJyjvNtgGe9vxsAwizZZG3MMb+KR0Nc8QsJq39:oQgp8jAtg3tZEMe0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan