metasploit | 5eaff298c1333a79f7f671b162c7085c30f0a6fc1d23626d4657a84ec5bcc768 | Triage

Sharing

General

Target

5eaff298c1333a79f7f671b162c7085c30f0a6fc1d23626d4657a84ec5bcc768
Size

41KB
Sample

240910-ssf5nazeml
MD5

2410562238a39ac592b28e0b9d4b016a
SHA1

ecc4970797fc2a96fd74c96b2c99547c1f389249
SHA256

5eaff298c1333a79f7f671b162c7085c30f0a6fc1d23626d4657a84ec5bcc768
SHA512

c39c17ab77d75aa787478918542879ae179ea39efc7f9aef5c58bb34bb72cde4828c1279a3064488186c4dbca1ca6be0c9e112b960ac671ffe280700ca806d81
SSDEEP

384:smCGpIy9aOLcVFAoMm2nN+i+ntnw1HdYjwPhgbv5SND2nI+zt:tvN9NYVFpMnn0I9YKhOv5SNDpmt

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.173.128:80/H5op

Attributes

headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM)

Targets

- Target
  
  5eaff298c1333a79f7f671b162c7085c30f0a6fc1d23626d4657a84ec5bcc768
- Size
  
  41KB
- MD5
  
  2410562238a39ac592b28e0b9d4b016a
- SHA1
  
  ecc4970797fc2a96fd74c96b2c99547c1f389249
- SHA256
  
  5eaff298c1333a79f7f671b162c7085c30f0a6fc1d23626d4657a84ec5bcc768
- SHA512
  
  c39c17ab77d75aa787478918542879ae179ea39efc7f9aef5c58bb34bb72cde4828c1279a3064488186c4dbca1ca6be0c9e112b960ac671ffe280700ca806d81
- SSDEEP
  
  384:smCGpIy9aOLcVFAoMm2nN+i+ntnw1HdYjwPhgbv5SND2nI+zt:tvN9NYVFpMnn0I9YKhOv5SNDpmt
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan