metasploit | 790fafd498127250f8124094c5bfae382eac403087feacc79d2681b6253d01ff | Triage

Sharing

General

Target

790fafd498127250f8124094c5bfae382eac403087feacc79d2681b6253d01ff
Size

72KB
Sample

240509-26adpscd2s
MD5

69f8b6974f21216a3c61ebd1bc972378
SHA1

a35cb8fbc33cc8d3edeafbc660718324815360c6
SHA256

790fafd498127250f8124094c5bfae382eac403087feacc79d2681b6253d01ff
SHA512

d1f96e8cb738e6c88c6d097c3c3fe543804037925e030fb1e76af09a10c65d890b3ecf7f67920758f7971264187ee4c56b86a16c4580567d5950fdfe6c156826
SSDEEP

1536:ImaeGabohFKCCcFjcxsYfgjKuMb+KR0Nc8QsJq39:AhFtCcFj85oe0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

158.209.167.206:47740

Targets

- Target
  
  790fafd498127250f8124094c5bfae382eac403087feacc79d2681b6253d01ff
- Size
  
  72KB
- MD5
  
  69f8b6974f21216a3c61ebd1bc972378
- SHA1
  
  a35cb8fbc33cc8d3edeafbc660718324815360c6
- SHA256
  
  790fafd498127250f8124094c5bfae382eac403087feacc79d2681b6253d01ff
- SHA512
  
  d1f96e8cb738e6c88c6d097c3c3fe543804037925e030fb1e76af09a10c65d890b3ecf7f67920758f7971264187ee4c56b86a16c4580567d5950fdfe6c156826
- SSDEEP
  
  1536:ImaeGabohFKCCcFjcxsYfgjKuMb+KR0Nc8QsJq39:AhFtCcFj85oe0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan