metasploit | eabe41fd5f8de1963e85cedd330a8d2f9380687bd81369f1cb1c58aa333c56fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f1424363403e3cd599547f7381b38a0N.exe
Size

291KB
Sample

240814-a46kksshmg
MD5

4f1424363403e3cd599547f7381b38a0
SHA1

6ff2a8b806da95d0ceae0cd9654f0af9fba41b10
SHA256

eabe41fd5f8de1963e85cedd330a8d2f9380687bd81369f1cb1c58aa333c56fc
SHA512

6b850f072205af651265d6ab7f1642f1d11cd060d731a6ee8798fa43d4b3b60f424cd7b2878c4331b4d1180635f418f51a036e91ba667fe3f931c5eebbe85fca
SSDEEP

6144:9VtEJ2SJViuBQIJshK7OtPRM6NwExpEPerjMddf1Gga32qKL/UrTk:9DS2S6uBQK7Oo2dxpE53f1bVLcr

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_nonx_tcp

C2

67.212.67.74:20688

Targets

- Target
  
  4f1424363403e3cd599547f7381b38a0N.exe
- Size
  
  291KB
- MD5
  
  4f1424363403e3cd599547f7381b38a0
- SHA1
  
  6ff2a8b806da95d0ceae0cd9654f0af9fba41b10
- SHA256
  
  eabe41fd5f8de1963e85cedd330a8d2f9380687bd81369f1cb1c58aa333c56fc
- SHA512
  
  6b850f072205af651265d6ab7f1642f1d11cd060d731a6ee8798fa43d4b3b60f424cd7b2878c4331b4d1180635f418f51a036e91ba667fe3f931c5eebbe85fca
- SSDEEP
  
  6144:9VtEJ2SJViuBQIJshK7OtPRM6NwExpEPerjMddf1Gga32qKL/UrTk:9DS2S6uBQK7Oo2dxpE53f1bVLcr
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan