metasploit | 15ff86761cb7aa33af93afdf68790843ad26158e44da08d37ce9e2cf3f21d8b4 | Triage

Sharing

General

Target

15ff86761cb7aa33af93afdf68790843ad26158e44da08d37ce9e2cf3f21d8b4
Size

72KB
Sample

240516-xyyzwaca48
MD5

4e8053943d08c3ec57633dd5de33df28
SHA1

a7457ae9f8b8d536641e63a2f6ec73d1636d263b
SHA256

15ff86761cb7aa33af93afdf68790843ad26158e44da08d37ce9e2cf3f21d8b4
SHA512

cfaf26d235c88eff42594a9d0aaee49defe468d7ecbe4381571b609ac70f1678b894060aa52a0b61e9c8ccd9b1f647fca53a922c183a7b51fe69ce796ad16327
SSDEEP

1536:ITD4vtCCKNNbGECy0Tec4HID2+D+UId9mGvapDxtK7z3iMb+KR0Nc8QsJq39:mD6wNbGEbnHID2I+12GpH3ie0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

171.47.120.158:16770

Targets

- Target
  
  15ff86761cb7aa33af93afdf68790843ad26158e44da08d37ce9e2cf3f21d8b4
- Size
  
  72KB
- MD5
  
  4e8053943d08c3ec57633dd5de33df28
- SHA1
  
  a7457ae9f8b8d536641e63a2f6ec73d1636d263b
- SHA256
  
  15ff86761cb7aa33af93afdf68790843ad26158e44da08d37ce9e2cf3f21d8b4
- SHA512
  
  cfaf26d235c88eff42594a9d0aaee49defe468d7ecbe4381571b609ac70f1678b894060aa52a0b61e9c8ccd9b1f647fca53a922c183a7b51fe69ce796ad16327
- SSDEEP
  
  1536:ITD4vtCCKNNbGECy0Tec4HID2+D+UId9mGvapDxtK7z3iMb+KR0Nc8QsJq39:mD6wNbGEbnHID2I+12GpH3ie0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan