metasploit | c2b5ddf45149ceaa8a0581d42944379227d5bab41ef4247177b2900d0da8a9b3 | Triage

Sharing

General

Target

94e462ee043d0dd5436fdc9a4b8beb00_NeikiAnalytics
Size

72KB
Sample

240510-hjy9rsge6z
MD5

94e462ee043d0dd5436fdc9a4b8beb00
SHA1

3d572091603e6d023a4c1a594a4b2c2495ae681e
SHA256

c2b5ddf45149ceaa8a0581d42944379227d5bab41ef4247177b2900d0da8a9b3
SHA512

00e4795d22f453b28900a51e57213d1203f1ef05ab46526a592c492e97fba4e641c263d2d9a594cc63288e181b608f30baf53382af939ca12d9a034445fe0786
SSDEEP

1536:I3XbTA3Ra7TvJpGl8/nbJmFymRRKN5/VMb+KR0Nc8QsJq39:0bTABaJlDJmgJe0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

182.24.169.139:10205

Targets

- Target
  
  94e462ee043d0dd5436fdc9a4b8beb00_NeikiAnalytics
- Size
  
  72KB
- MD5
  
  94e462ee043d0dd5436fdc9a4b8beb00
- SHA1
  
  3d572091603e6d023a4c1a594a4b2c2495ae681e
- SHA256
  
  c2b5ddf45149ceaa8a0581d42944379227d5bab41ef4247177b2900d0da8a9b3
- SHA512
  
  00e4795d22f453b28900a51e57213d1203f1ef05ab46526a592c492e97fba4e641c263d2d9a594cc63288e181b608f30baf53382af939ca12d9a034445fe0786
- SSDEEP
  
  1536:I3XbTA3Ra7TvJpGl8/nbJmFymRRKN5/VMb+KR0Nc8QsJq39:0bTABaJlDJmgJe0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan