metasploit | 8616e2dc528af387a3a312b31d7b7a39868597fc0c9bd0df24e16306ccd74890 | Triage

Sharing

General

Target

8616e2dc528af387a3a312b31d7b7a39868597fc0c9bd0df24e16306ccd74890
Size

958KB
Sample

240507-mcph7sbh6x
MD5

7d17b2aa0fec1c31f3c2ac4116b14df2
SHA1

b7e7467b5ee583db98211e546bca0f8ed0b599a5
SHA256

8616e2dc528af387a3a312b31d7b7a39868597fc0c9bd0df24e16306ccd74890
SHA512

eb139af12d01acf55d49af3d4cf0b1a5b774169fd02588c9420164d76e417ce3f1b7fe0380a4d42073234b006ba9e963463f75d92da541f6d0aed38837f1d492
SSDEEP

24576:bbl8MY1hrvEeJ5jicEN78fYlTxAtuMTix:1FYfzE27ENQw74u0ix

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.30.202:5555

Targets

- Target
  
  8616e2dc528af387a3a312b31d7b7a39868597fc0c9bd0df24e16306ccd74890
- Size
  
  958KB
- MD5
  
  7d17b2aa0fec1c31f3c2ac4116b14df2
- SHA1
  
  b7e7467b5ee583db98211e546bca0f8ed0b599a5
- SHA256
  
  8616e2dc528af387a3a312b31d7b7a39868597fc0c9bd0df24e16306ccd74890
- SHA512
  
  eb139af12d01acf55d49af3d4cf0b1a5b774169fd02588c9420164d76e417ce3f1b7fe0380a4d42073234b006ba9e963463f75d92da541f6d0aed38837f1d492
- SSDEEP
  
  24576:bbl8MY1hrvEeJ5jicEN78fYlTxAtuMTix:1FYfzE27ENQw74u0ix
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan