metasploit | c35395dcb68b225650cb9de77d8a3cdee287750bbf49492296fb23b791e9962c | Triage

Sharing

General

Target

c35395dcb68b225650cb9de77d8a3cdee287750bbf49492296fb23b791e9962c
Size

72KB
Sample

240510-czgf1adg7t
MD5

27c7ab1beb702f2b95914b8a73af8935
SHA1

c8111844263766c7f13e1f37fa30ef111cd708d1
SHA256

c35395dcb68b225650cb9de77d8a3cdee287750bbf49492296fb23b791e9962c
SHA512

d8f8d8c5f5659874357272bf0da877225c2402efa9f5db9e1deefdb4171e60e238c20afd591921eec4f7603a404085f538ba6c5b9fb3edff4c22582d52c56abf
SSDEEP

1536:IY3Fev9D3OLCuvI7YbwANg2KKyPoMb+KR0Nc8QsJq39:h3FeFiLCUgz2Koe0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

80.195.5.133:4444

Targets

- Target
  
  c35395dcb68b225650cb9de77d8a3cdee287750bbf49492296fb23b791e9962c
- Size
  
  72KB
- MD5
  
  27c7ab1beb702f2b95914b8a73af8935
- SHA1
  
  c8111844263766c7f13e1f37fa30ef111cd708d1
- SHA256
  
  c35395dcb68b225650cb9de77d8a3cdee287750bbf49492296fb23b791e9962c
- SHA512
  
  d8f8d8c5f5659874357272bf0da877225c2402efa9f5db9e1deefdb4171e60e238c20afd591921eec4f7603a404085f538ba6c5b9fb3edff4c22582d52c56abf
- SSDEEP
  
  1536:IY3Fev9D3OLCuvI7YbwANg2KKyPoMb+KR0Nc8QsJq39:h3FeFiLCUgz2Koe0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan