metasploit | ba7d6e9ac213ff77322addaa1ef24692d2cb786b76c56842fcbf2c261dabced8 | Triage

Sharing

General

Target

ba7d6e9ac213ff77322addaa1ef24692d2cb786b76c56842fcbf2c261dabced8
Size

5KB
Sample

240903-ffwy5ayeqg
MD5

441e34332a140984169103f72dd2a40c
SHA1

56179f32e2ca6c3c6692561175adbc2d57038cb2
SHA256

ba7d6e9ac213ff77322addaa1ef24692d2cb786b76c56842fcbf2c261dabced8
SHA512

5443bdf2496c5eb4ec72f8ab2f5f5c24c9092d916098c0332ba4021ba9efb515b36cf983f146061f276d91dfff3840b28c1e3caa7d9988e2c1a7160381a175f9
SSDEEP

96:53GzALzfOZVepiWxdrgMrF+21gTN69Byn6J6x:5WAL7AVFQdrlVwkyn6J

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.102:4444

Targets

- Target
  
  ba7d6e9ac213ff77322addaa1ef24692d2cb786b76c56842fcbf2c261dabced8
- Size
  
  5KB
- MD5
  
  441e34332a140984169103f72dd2a40c
- SHA1
  
  56179f32e2ca6c3c6692561175adbc2d57038cb2
- SHA256
  
  ba7d6e9ac213ff77322addaa1ef24692d2cb786b76c56842fcbf2c261dabced8
- SHA512
  
  5443bdf2496c5eb4ec72f8ab2f5f5c24c9092d916098c0332ba4021ba9efb515b36cf983f146061f276d91dfff3840b28c1e3caa7d9988e2c1a7160381a175f9
- SSDEEP
  
  96:53GzALzfOZVepiWxdrgMrF+21gTN69Byn6J6x:5WAL7AVFQdrlVwkyn6J
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan