metasploit | ceab7cefdbb9c62221c85cf138a2446c4460c3701e463487906eba23b6df6844 | Triage

Sharing

General

Target

天神魔域.exe
Size

1.8MB
Sample

240524-p7apmseb22
MD5

5e3b27ad011681c8f3a4338d82772e8a
SHA1

e6b4657011102a10dfbd1f54d4765f3422df40ca
SHA256

ceab7cefdbb9c62221c85cf138a2446c4460c3701e463487906eba23b6df6844
SHA512

ddcf1010e422babb2a13d1402d50209431f632ab8c349da2b8a708c6bb425c3bf2d655709c222b230f1044b94ce7be0c4bf9d79eab26946549ab8f0a1547d10a
SSDEEP

24576:/3vLRdVhZBK8NogWYO098OGi9J3YiWdCMJ5QxmjwC/hR:/3d5ZQ18xJIiW0MbQxA

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

1.15.12.73:4567

Targets

- Target
  
  天神魔域.exe
- Size
  
  1.8MB
- MD5
  
  5e3b27ad011681c8f3a4338d82772e8a
- SHA1
  
  e6b4657011102a10dfbd1f54d4765f3422df40ca
- SHA256
  
  ceab7cefdbb9c62221c85cf138a2446c4460c3701e463487906eba23b6df6844
- SHA512
  
  ddcf1010e422babb2a13d1402d50209431f632ab8c349da2b8a708c6bb425c3bf2d655709c222b230f1044b94ce7be0c4bf9d79eab26946549ab8f0a1547d10a
- SSDEEP
  
  24576:/3vLRdVhZBK8NogWYO098OGi9J3YiWdCMJ5QxmjwC/hR:/3d5ZQ18xJIiW0MbQxA
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan