metasploit | ccf88e55297788e8125ac8a3c4df20a4147481eb521452106080a8e8ff1410c4 | Triage

Sharing

General

Target

ccf88e55297788e8125ac8a3c4df20a4147481eb521452106080a8e8ff1410c4
Size

945KB
Sample

240517-crdedadb47
MD5

685d0225c0cf010a77c59813a9b29fff
SHA1

e1a9482c11ff9e5c569a79afd17bcf4e0d37ca06
SHA256

ccf88e55297788e8125ac8a3c4df20a4147481eb521452106080a8e8ff1410c4
SHA512

9fb9c89f1198cbc0efc23729c2537012129b453b6e0a0edf8ea1d60eff989135eb75d3c3f87a3d9bfd415256f9ad6a0c7aac30a03bf2ea0c6d6b041416c30757
SSDEEP

24576:wHBqpyQfLBZYFvicglg6CjrFYRZa59Giqp:wM7nO

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://104.129.182.165:45141/t5Fm

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET4.0C; .NET4.0E)

Targets

- Target
  
  ccf88e55297788e8125ac8a3c4df20a4147481eb521452106080a8e8ff1410c4
- Size
  
  945KB
- MD5
  
  685d0225c0cf010a77c59813a9b29fff
- SHA1
  
  e1a9482c11ff9e5c569a79afd17bcf4e0d37ca06
- SHA256
  
  ccf88e55297788e8125ac8a3c4df20a4147481eb521452106080a8e8ff1410c4
- SHA512
  
  9fb9c89f1198cbc0efc23729c2537012129b453b6e0a0edf8ea1d60eff989135eb75d3c3f87a3d9bfd415256f9ad6a0c7aac30a03bf2ea0c6d6b041416c30757
- SSDEEP
  
  24576:wHBqpyQfLBZYFvicglg6CjrFYRZa59Giqp:wM7nO
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan