metasploit | 4b49dff29e004fc8430c919d03653cebb34bf0127dd35d67e317b337d25490fc | Triage

Sharing

General

Target

4b49dff29e004fc8430c919d03653cebb34bf0127dd35d67e317b337d25490fc
Size

217KB
Sample

240913-fqneqswaqj
MD5

6f859a93b08faf0d0e9eed7b59c2fa6c
SHA1

707f67d9de6d9600895e247f5144ec160f902c4a
SHA256

4b49dff29e004fc8430c919d03653cebb34bf0127dd35d67e317b337d25490fc
SHA512

94fa40f7a0298c845cf607813842380991c723beee6702a7e5d8ea2793bac8ad9174204df9632864b235049f366bbe5ce1f3c98cf6e606b984b257ee1f9aaf39
SSDEEP

6144:XI9foirmT/aDTx5nOwX00au/1v3yaN9sR7/nF:Y9jrmTWOk93yO2nF

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.101.9:443/jquery-3.3.1.slim.min.js

Targets

- Target
  
  4b49dff29e004fc8430c919d03653cebb34bf0127dd35d67e317b337d25490fc
- Size
  
  217KB
- MD5
  
  6f859a93b08faf0d0e9eed7b59c2fa6c
- SHA1
  
  707f67d9de6d9600895e247f5144ec160f902c4a
- SHA256
  
  4b49dff29e004fc8430c919d03653cebb34bf0127dd35d67e317b337d25490fc
- SHA512
  
  94fa40f7a0298c845cf607813842380991c723beee6702a7e5d8ea2793bac8ad9174204df9632864b235049f366bbe5ce1f3c98cf6e606b984b257ee1f9aaf39
- SSDEEP
  
  6144:XI9foirmT/aDTx5nOwX00au/1v3yaN9sR7/nF:Y9jrmTWOk93yO2nF
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

metasploitbackdoordiscoverytrojan