metasploit | d070ca0aad392b84d0765d02c8ae9124a06b029e0c61bfa72a3049c465722d3e | Triage

Sharing

General

Target

d070ca0aad392b84d0765d02c8ae9124a06b029e0c61bfa72a3049c465722d3e
Size

7.6MB
Sample

240601-pq4w6acd9z
MD5

29f6695de9a9d09b91db6ab4574e1174
SHA1

c79235a3e4c00f97cf0194baad720f03fc765602
SHA256

d070ca0aad392b84d0765d02c8ae9124a06b029e0c61bfa72a3049c465722d3e
SHA512

520ab61f42b4e005abbfc26b58cc113dd6e84e0cd75a552a490b336b72dbfbcff1443b9370534cf99e2c6aecf5640d3bbc6fa8098bc573a91d08300a929dd006
SSDEEP

98304:ACF+OIyoWoZf1i0hUNfHBiCV2HW/E9C0hUNfHBiCV2HvNX/H0hUNfHBiCV2HvNX/:T+OIynoyjNIKEEjNYBHjNYB

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  
  d070ca0aad392b84d0765d02c8ae9124a06b029e0c61bfa72a3049c465722d3e
- Size
  
  7.6MB
- MD5
  
  29f6695de9a9d09b91db6ab4574e1174
- SHA1
  
  c79235a3e4c00f97cf0194baad720f03fc765602
- SHA256
  
  d070ca0aad392b84d0765d02c8ae9124a06b029e0c61bfa72a3049c465722d3e
- SHA512
  
  520ab61f42b4e005abbfc26b58cc113dd6e84e0cd75a552a490b336b72dbfbcff1443b9370534cf99e2c6aecf5640d3bbc6fa8098bc573a91d08300a929dd006
- SSDEEP
  
  98304:ACF+OIyoWoZf1i0hUNfHBiCV2HW/E9C0hUNfHBiCV2HvNX/H0hUNfHBiCV2HvNX/:T+OIynoyjNIKEEjNYBHjNYB
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan