metasploit | 619ecab7357cff771e09ea47767d9f14a7f53f5b21c12b536894ee270b9dccd2 | Triage

Sharing

General

Target

619ecab7357cff771e09ea47767d9f14a7f53f5b21c12b536894ee270b9dccd2
Size

1.3MB
Sample

240505-mds8saad75
MD5

3607bcee5affb83b0b3a196ea6a192b4
SHA1

3efa03e2280cdc63066731830919e2607f051ed7
SHA256

619ecab7357cff771e09ea47767d9f14a7f53f5b21c12b536894ee270b9dccd2
SHA512

51f6232ce2e7dde02d10104de5d2e762ecae8db9143185ab2ccd2693d43a2f674ef3972df294ef1ccee7e780fb7ba3446cd215975bf9d04a750251d1582194ee
SSDEEP

24576:pQMrmNW5cVkyEq9DRho1jFP8ltPP01Ws7+wFPEl9ix4fpUzoQDt+egElxdqFWVCn:uMyUcCyEq9DRho/ctH01Ws74rA4RUBDI

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

106.75.174.5:6666

Targets

- Target
  
  619ecab7357cff771e09ea47767d9f14a7f53f5b21c12b536894ee270b9dccd2
- Size
  
  1.3MB
- MD5
  
  3607bcee5affb83b0b3a196ea6a192b4
- SHA1
  
  3efa03e2280cdc63066731830919e2607f051ed7
- SHA256
  
  619ecab7357cff771e09ea47767d9f14a7f53f5b21c12b536894ee270b9dccd2
- SHA512
  
  51f6232ce2e7dde02d10104de5d2e762ecae8db9143185ab2ccd2693d43a2f674ef3972df294ef1ccee7e780fb7ba3446cd215975bf9d04a750251d1582194ee
- SSDEEP
  
  24576:pQMrmNW5cVkyEq9DRho1jFP8ltPP01Ws7+wFPEl9ix4fpUzoQDt+egElxdqFWVCn:uMyUcCyEq9DRho/ctH01Ws74rA4RUBDI
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan