metasploit | 53ecf33de70023e10b56e83b142e1d30df5d7fbf12954c957b6bd8b21621d956 | Triage

Sharing

General

Target

335af281054a345e4e18b11b7ef89290_NeikiAnalytics
Size

72KB
Sample

240510-a7ma4scc59
MD5

335af281054a345e4e18b11b7ef89290
SHA1

8fa0f1fc9565509d76e5f90acc922ab51a923046
SHA256

53ecf33de70023e10b56e83b142e1d30df5d7fbf12954c957b6bd8b21621d956
SHA512

d3f67c5b9abceabfbac2be20098bdcfc99ed2df256aed1bd2098bf595d40582e3265cd85e27c609c55f0c9a8ecc7327698507aa93f9c69a92690417af06c7860
SSDEEP

1536:IFvH0xx9Lu+O61mXb9hg+NYPt+e7kMb+KR0Nc8QsJq39:sHoDLWOwg+CU2ke0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

57.16.214.8:17820

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

- Target
  
  335af281054a345e4e18b11b7ef89290_NeikiAnalytics
- Size
  
  72KB
- MD5
  
  335af281054a345e4e18b11b7ef89290
- SHA1
  
  8fa0f1fc9565509d76e5f90acc922ab51a923046
- SHA256
  
  53ecf33de70023e10b56e83b142e1d30df5d7fbf12954c957b6bd8b21621d956
- SHA512
  
  d3f67c5b9abceabfbac2be20098bdcfc99ed2df256aed1bd2098bf595d40582e3265cd85e27c609c55f0c9a8ecc7327698507aa93f9c69a92690417af06c7860
- SSDEEP
  
  1536:IFvH0xx9Lu+O61mXb9hg+NYPt+e7kMb+KR0Nc8QsJq39:sHoDLWOwg+CU2ke0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan