metasploit

General

Target

file
Size

72KB
Sample

240910-z2gacavglp
MD5

873968e78f372ab3a66ffbab310e6a39
SHA1

24bd7920defeed5f5407afd24c6d6e576e5db64f
SHA256

781d0d748c28efa7f9120dd199be4f0587cc02699b340e36ee439957bf6ac61e
SHA512

c7c06425c8b1cd563323dfa0f6e48158d55eb3f5f0e1ebd5f6d5cac6ba629b0a806e024480a2e9ae863f101249dbbf3ca8105ffaf40248bf7a72cd2ee4f0580a
SSDEEP

1536:Imw4oz8ggSfCX4reJtzuMb+KR0Nc8QsJq39:tggyy/zue0Nc8QsC9

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://89.197.154.116:7810/JRsIfcQhbfLWkdeQsEmgzwK5G11jeHPD5BsHTohTFnFpv53q_LcZ-LpdqZoJcLpBlbkfj3lvc-8-OpkAt2MDQuUaVBw6Df5TQVdzIQDPXc9BX9uZem_Zvrh6qqjSLbzfRxP3H_yzXDbk_Hiwa7kLD4fvcbAaix3ITXkIB2YbB8DjNvt65Mv_Ns-KnPQrODtwWTTM9JcY1ctfdIjMw-x72FSPw8uNpn

Targets

- Target
  
  file
- Size
  
  72KB
- MD5
  
  873968e78f372ab3a66ffbab310e6a39
- SHA1
  
  24bd7920defeed5f5407afd24c6d6e576e5db64f
- SHA256
  
  781d0d748c28efa7f9120dd199be4f0587cc02699b340e36ee439957bf6ac61e
- SHA512
  
  c7c06425c8b1cd563323dfa0f6e48158d55eb3f5f0e1ebd5f6d5cac6ba629b0a806e024480a2e9ae863f101249dbbf3ca8105ffaf40248bf7a72cd2ee4f0580a
- SSDEEP
  
  1536:Imw4oz8ggSfCX4reJtzuMb+KR0Nc8QsJq39:tggyy/zue0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2