metasploit | e7e82186fa1bd60c692e715a05c9d0d001402d495e4f3569f6263fb0aa8f842d | Triage

Sharing

General

Target

d5a764ababc5812fab9e78432dc93910N
Size

72KB
Sample

240913-2rd4catbjl
MD5

d5a764ababc5812fab9e78432dc93910
SHA1

d00b0a834b482b37e84c5657830c45538a82a222
SHA256

e7e82186fa1bd60c692e715a05c9d0d001402d495e4f3569f6263fb0aa8f842d
SHA512

7682bbed7cd29a2a9d4cc781d5a8bf363e70a36a8735fd4a675d6cdbe164e36cda17bd9ddfae86dfff584b8fe6145ea6a8b59b4d44b91c4d02df6be18a21d58d
SSDEEP

1536:IAvoKhXsiJhSdMPKXdH4rAjbI1sFJGi6YVNMb+KR0Nc8QsJq39:3oKRsiv1PKXdH4rAxFtfe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.79:7774

Targets

- Target
  
  d5a764ababc5812fab9e78432dc93910N
- Size
  
  72KB
- MD5
  
  d5a764ababc5812fab9e78432dc93910
- SHA1
  
  d00b0a834b482b37e84c5657830c45538a82a222
- SHA256
  
  e7e82186fa1bd60c692e715a05c9d0d001402d495e4f3569f6263fb0aa8f842d
- SHA512
  
  7682bbed7cd29a2a9d4cc781d5a8bf363e70a36a8735fd4a675d6cdbe164e36cda17bd9ddfae86dfff584b8fe6145ea6a8b59b4d44b91c4d02df6be18a21d58d
- SSDEEP
  
  1536:IAvoKhXsiJhSdMPKXdH4rAjbI1sFJGi6YVNMb+KR0Nc8QsJq39:3oKRsiv1PKXdH4rAxFtfe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2