metasploit | d67f48dd6e626c32ca9decd61ee475c66d5489b7fbe5e3bd7b6ff07e941b33aa | Triage

Sharing

General

Target

9c58c9f26a55f304302f8251964fe570_NeikiAnalytics
Size

72KB
Sample

240510-h1kgyahf3v
MD5

9c58c9f26a55f304302f8251964fe570
SHA1

ed23bbb77b1d2e8292f4f9a5eec65927dc4f653e
SHA256

d67f48dd6e626c32ca9decd61ee475c66d5489b7fbe5e3bd7b6ff07e941b33aa
SHA512

1a4deac4035943cb58b749cd451a26237a7083211aabd009bd5d36be1d46ec3ab71b4d2f2ebba699f39b1dae25e6c3adf3712d9b9df61564b758b584292af2d1
SSDEEP

1536:I96kHkUAs3Le8o6U3tY8MggePFElWkmM3MTrx0DUhGWMb+KR0Nc8QsJq39:G6kHkUAs3Ler6U3r1g6FElWkmuMTIUo3

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

111.126.41.228:36662

Targets

- Target
  
  9c58c9f26a55f304302f8251964fe570_NeikiAnalytics
- Size
  
  72KB
- MD5
  
  9c58c9f26a55f304302f8251964fe570
- SHA1
  
  ed23bbb77b1d2e8292f4f9a5eec65927dc4f653e
- SHA256
  
  d67f48dd6e626c32ca9decd61ee475c66d5489b7fbe5e3bd7b6ff07e941b33aa
- SHA512
  
  1a4deac4035943cb58b749cd451a26237a7083211aabd009bd5d36be1d46ec3ab71b4d2f2ebba699f39b1dae25e6c3adf3712d9b9df61564b758b584292af2d1
- SSDEEP
  
  1536:I96kHkUAs3Le8o6U3tY8MggePFElWkmM3MTrx0DUhGWMb+KR0Nc8QsJq39:G6kHkUAs3Ler6U3r1g6FElWkmuMTIUo3
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan