metasploit | cc9fbe57771ff4f36c05057dda389c5f8bd9257429bb21f66e8988375906f5d1 | Triage

Sharing

General

Target

0c856e3ccdeb2ebea704713d8dde9640_NeikiAnalytics.exe
Size

73KB
Sample

240603-2lhjksbf9x
MD5

0c856e3ccdeb2ebea704713d8dde9640
SHA1

10da76d25a88bf7cd065024851cc36a4c1326a51
SHA256

cc9fbe57771ff4f36c05057dda389c5f8bd9257429bb21f66e8988375906f5d1
SHA512

151e3586016e62d5e8661ce22a82a50e0f5b16df9f2af7b804028c8933ab7a597fa015bb0a3ca82b009f7a7dde2ae84bfe962641e2f9e7361f8f29818565d6fc
SSDEEP

1536:ns3YkIgzl11ihEKE7micueJAOs6aJH65HQnMsWN5mcd4mIHX6+hwFI:U1ihEKE7lCAOspJ0SK5H4mOX6ly

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.2.30:80/CXtM

Attributes

headers User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko

Targets

- Target
  
  0c856e3ccdeb2ebea704713d8dde9640_NeikiAnalytics.exe
- Size
  
  73KB
- MD5
  
  0c856e3ccdeb2ebea704713d8dde9640
- SHA1
  
  10da76d25a88bf7cd065024851cc36a4c1326a51
- SHA256
  
  cc9fbe57771ff4f36c05057dda389c5f8bd9257429bb21f66e8988375906f5d1
- SHA512
  
  151e3586016e62d5e8661ce22a82a50e0f5b16df9f2af7b804028c8933ab7a597fa015bb0a3ca82b009f7a7dde2ae84bfe962641e2f9e7361f8f29818565d6fc
- SSDEEP
  
  1536:ns3YkIgzl11ihEKE7micueJAOs6aJH65HQnMsWN5mcd4mIHX6+hwFI:U1ihEKE7lCAOspJ0SK5H4mOX6ly
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan