metasploit | 34a31d844632076f0129420aaeed6084249f08efc8d68ecf59d6c5dfef7be5e4 | Triage

Sharing

General

Target

34a31d844632076f0129420aaeed6084249f08efc8d68ecf59d6c5dfef7be5e4
Size

1.4MB
Sample

240509-mah9eafc68
MD5

b9696a8ea48f1d5798273869bf882681
SHA1

f757ff5f7f7fc41fdc528785d6911d8cc82d7e5f
SHA256

34a31d844632076f0129420aaeed6084249f08efc8d68ecf59d6c5dfef7be5e4
SHA512

e38b790addb75b30e168b363b8da50ac66ac19a34debd511bd9aca6c50990f9d1a2d838b06b0cc40a066d42e69f2046ebc30f0cb2c7f8dbfdd20ce250b973560
SSDEEP

24576:J78WhEqRWcegXXUDLxX6ufCCm1Xc7J6M63UAq+ExPIJdTaKIe0MStS/o6ui2OXK0:JV9ROOwlXDl4MoUAq+2k8KIeVSc/zuiV

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.65.129:3456

Targets

- Target
  
  34a31d844632076f0129420aaeed6084249f08efc8d68ecf59d6c5dfef7be5e4
- Size
  
  1.4MB
- MD5
  
  b9696a8ea48f1d5798273869bf882681
- SHA1
  
  f757ff5f7f7fc41fdc528785d6911d8cc82d7e5f
- SHA256
  
  34a31d844632076f0129420aaeed6084249f08efc8d68ecf59d6c5dfef7be5e4
- SHA512
  
  e38b790addb75b30e168b363b8da50ac66ac19a34debd511bd9aca6c50990f9d1a2d838b06b0cc40a066d42e69f2046ebc30f0cb2c7f8dbfdd20ce250b973560
- SSDEEP
  
  24576:J78WhEqRWcegXXUDLxX6ufCCm1Xc7J6M63UAq+ExPIJdTaKIe0MStS/o6ui2OXK0:JV9ROOwlXDl4MoUAq+2k8KIeVSc/zuiV
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan