metasploit | 1e610c3dfd38e6c7fea6ed11b9e5525218568cc03968815d94b1a0593184b1b8 | Triage

Sharing

General

Target

3663055be2f6f72ad80211bcb541a020_NeikiAnalytics.exe
Size

14KB
Sample

240531-tntevsec88
MD5

3663055be2f6f72ad80211bcb541a020
SHA1

dc989bb37d17d03984045184fdcc731ee1f50b38
SHA256

1e610c3dfd38e6c7fea6ed11b9e5525218568cc03968815d94b1a0593184b1b8
SHA512

13f839a42c9ba3acfd561342c6b3a681dda72314b02ad2ed33753a4d3cca365070cb76c6f6619b3941eb812ad74a4ea30901da7b3854c2ad9ba16096f41bec55
SSDEEP

192:3HCugRK83SxHn2OQ/dmBI4KBPwgir+xzJlDIbqUqV/Qjo7AGa:XCxRKqbOCdWIVBPk+xzJlofCXAn

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.1.98:1443/Cjv9

Attributes

headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)

Targets

- Target
  
  3663055be2f6f72ad80211bcb541a020_NeikiAnalytics.exe
- Size
  
  14KB
- MD5
  
  3663055be2f6f72ad80211bcb541a020
- SHA1
  
  dc989bb37d17d03984045184fdcc731ee1f50b38
- SHA256
  
  1e610c3dfd38e6c7fea6ed11b9e5525218568cc03968815d94b1a0593184b1b8
- SHA512
  
  13f839a42c9ba3acfd561342c6b3a681dda72314b02ad2ed33753a4d3cca365070cb76c6f6619b3941eb812ad74a4ea30901da7b3854c2ad9ba16096f41bec55
- SSDEEP
  
  192:3HCugRK83SxHn2OQ/dmBI4KBPwgir+xzJlDIbqUqV/Qjo7AGa:XCxRKqbOCdWIVBPk+xzJlofCXAn
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan