metasploit | cd6f933381c0a535549b12f9f493c02cf8eb78e4ae990e1bc5c1c4e1f662554e | Triage

Sharing

General

Target

e6f7eb7e8b6d1122f876ae028eae1040_NeikiAnalytics.exe
Size

72KB
Sample

240517-k754bsbe36
MD5

e6f7eb7e8b6d1122f876ae028eae1040
SHA1

e3b11a18781c8bed11160d3dcdadfa6f99062698
SHA256

cd6f933381c0a535549b12f9f493c02cf8eb78e4ae990e1bc5c1c4e1f662554e
SHA512

affde5677f88d3d89bb88310013b3774ff261cac4b7254a8d60e6e94048d8fd920269037f230ecb3bfd8c9a95a8341f8d529c4ab8e2a4a00f2be79848bf5fcb1
SSDEEP

1536:I3LRJ6Alkb+2ZNdfRphMb+KR0Nc8QsJq39:8LRJ69ZNz/e0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

30.50.106.108:19391

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

- Target
  
  e6f7eb7e8b6d1122f876ae028eae1040_NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  e6f7eb7e8b6d1122f876ae028eae1040
- SHA1
  
  e3b11a18781c8bed11160d3dcdadfa6f99062698
- SHA256
  
  cd6f933381c0a535549b12f9f493c02cf8eb78e4ae990e1bc5c1c4e1f662554e
- SHA512
  
  affde5677f88d3d89bb88310013b3774ff261cac4b7254a8d60e6e94048d8fd920269037f230ecb3bfd8c9a95a8341f8d529c4ab8e2a4a00f2be79848bf5fcb1
- SSDEEP
  
  1536:I3LRJ6Alkb+2ZNdfRphMb+KR0Nc8QsJq39:8LRJ69ZNz/e0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan