metasploit | e3866b755ba36e5f980e2dfb7b6fcef9f0f2c22435a3670b6b224832292b5d84 | Triage

Sharing

General

Target

29626676452ed086568642063a6d0680_NeikiAnalytics
Size

72KB
Sample

240510-vje74sba83
MD5

29626676452ed086568642063a6d0680
SHA1

3f4cb2d5383229041105a7217055d55ad110ea2b
SHA256

e3866b755ba36e5f980e2dfb7b6fcef9f0f2c22435a3670b6b224832292b5d84
SHA512

c47d30a89d8d38dbcf58eafeb1fd0d3e9523908cc085ca10beeba9bec85691075f615b066673ddc0265962afe8978d5138564fe5c9dc6378b51e5dc1b1f7174a
SSDEEP

1536:Ild2Ytg3QXBE6GgpFl4jMb+KR0Nc8QsJq39:cd2LQBLl4je0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

80.195.5.133:4444

Targets

- Target
  
  29626676452ed086568642063a6d0680_NeikiAnalytics
- Size
  
  72KB
- MD5
  
  29626676452ed086568642063a6d0680
- SHA1
  
  3f4cb2d5383229041105a7217055d55ad110ea2b
- SHA256
  
  e3866b755ba36e5f980e2dfb7b6fcef9f0f2c22435a3670b6b224832292b5d84
- SHA512
  
  c47d30a89d8d38dbcf58eafeb1fd0d3e9523908cc085ca10beeba9bec85691075f615b066673ddc0265962afe8978d5138564fe5c9dc6378b51e5dc1b1f7174a
- SSDEEP
  
  1536:Ild2Ytg3QXBE6GgpFl4jMb+KR0Nc8QsJq39:cd2LQBLl4je0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan