metasploit | bbd71a5451d8c14d750818d5a6171579a41255b4ac6bf862c2d1df4b0cd712d1 | Triage

Sharing

General

Target

bbd71a5451d8c14d750818d5a6171579a41255b4ac6bf862c2d1df4b0cd712d1
Size

72KB
Sample

240607-gz57ksaf3y
MD5

d5eb01a97f7bc228a97a1f4e8035a51c
SHA1

d1ef7dcbd7861b057c6c8a34a677979f7d8f7a32
SHA256

bbd71a5451d8c14d750818d5a6171579a41255b4ac6bf862c2d1df4b0cd712d1
SHA512

a5d691817387cb9bae64a229eb1fe9dfe307cb777f650546ff7bd803fc3c120891e82fc6a7a0a11c6a0b45f6f6e8b6947575b9e3a518703d2fd91e3500e0992b
SSDEEP

1536:IRbLulLTVY3spDdDfjeJH2xXdDXMb+KR0Nc8QsJq39:IbLulTaqDM8tDXe0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.26.131:4456

Targets

- Target
  
  bbd71a5451d8c14d750818d5a6171579a41255b4ac6bf862c2d1df4b0cd712d1
- Size
  
  72KB
- MD5
  
  d5eb01a97f7bc228a97a1f4e8035a51c
- SHA1
  
  d1ef7dcbd7861b057c6c8a34a677979f7d8f7a32
- SHA256
  
  bbd71a5451d8c14d750818d5a6171579a41255b4ac6bf862c2d1df4b0cd712d1
- SHA512
  
  a5d691817387cb9bae64a229eb1fe9dfe307cb777f650546ff7bd803fc3c120891e82fc6a7a0a11c6a0b45f6f6e8b6947575b9e3a518703d2fd91e3500e0992b
- SSDEEP
  
  1536:IRbLulLTVY3spDdDfjeJH2xXdDXMb+KR0Nc8QsJq39:IbLulTaqDM8tDXe0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan