metasploit | 319c20f9f7474c8028ed08c0789408f13f2de807579f43e16ee675112846688e | Triage

Sharing

General

Target

8e190551ee46dc7a08f87fa4dbe60a90_NeikiAnalytics
Size

72KB
Sample

240510-g45rlsbb69
MD5

8e190551ee46dc7a08f87fa4dbe60a90
SHA1

213967507f62c12e5beda8f5879ab79280ea965b
SHA256

319c20f9f7474c8028ed08c0789408f13f2de807579f43e16ee675112846688e
SHA512

1868bd6e283b507eb5cf2cb1b8dc2dd806d91c7a1344c9d1901ea66d2d948c9b20b2f09a313b5eab33d4f2a1e565fb76c9668e7b68a7f2cbdee6c899e8198e20
SSDEEP

1536:IMaza72XgJHxcCFgo8JaO0SY4M/ctCuB+ZaGAMb+KR0Nc8QsJq39:ZD72XgJRcDo8JdI4M/c82Y/Ae0Nc8Qss

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

176.65.93.66:30400

Targets

- Target
  
  8e190551ee46dc7a08f87fa4dbe60a90_NeikiAnalytics
- Size
  
  72KB
- MD5
  
  8e190551ee46dc7a08f87fa4dbe60a90
- SHA1
  
  213967507f62c12e5beda8f5879ab79280ea965b
- SHA256
  
  319c20f9f7474c8028ed08c0789408f13f2de807579f43e16ee675112846688e
- SHA512
  
  1868bd6e283b507eb5cf2cb1b8dc2dd806d91c7a1344c9d1901ea66d2d948c9b20b2f09a313b5eab33d4f2a1e565fb76c9668e7b68a7f2cbdee6c899e8198e20
- SSDEEP
  
  1536:IMaza72XgJHxcCFgo8JaO0SY4M/ctCuB+ZaGAMb+KR0Nc8QsJq39:ZD72XgJRcDo8JdI4M/c82Y/Ae0Nc8Qss
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan