metasploit | 3c5e40dd0f9d57d7a5270b83c21d6554e366e3651bce239d13ac5300c39f21b0 | Triage

Sharing

General

Target

d1b286ca94786cfc8ba0a45722acbb70N
Size

426KB
Sample

240913-pdkmra1cpg
MD5

d1b286ca94786cfc8ba0a45722acbb70
SHA1

08b42c33927f00f0ea6e358f7879de98fc110897
SHA256

3c5e40dd0f9d57d7a5270b83c21d6554e366e3651bce239d13ac5300c39f21b0
SHA512

ecf0d7e4ec7b8b1e6da325ccb9996fcc1d003bf1e91ea408d98c88b1d6179bc92dbe5413d18bdc2a12d7bcd074c8774a331237b070a8676f22dc3dff0bfe7794
SSDEEP

6144:jUZMhayQebMxU+qRvT0ss0E0voUvn24YU30lZ1sK1CQXoR+1WoXIuyq0ogcq9SsQ:QZpH2gQl/DFEiMP4rbo9q8ZJB

Score

10^/10

metasploit backdoor discovery execution trojan

Malware Config

Targets

- Target
  
  d1b286ca94786cfc8ba0a45722acbb70N
- Size
  
  426KB
- MD5
  
  d1b286ca94786cfc8ba0a45722acbb70
- SHA1
  
  08b42c33927f00f0ea6e358f7879de98fc110897
- SHA256
  
  3c5e40dd0f9d57d7a5270b83c21d6554e366e3651bce239d13ac5300c39f21b0
- SHA512
  
  ecf0d7e4ec7b8b1e6da325ccb9996fcc1d003bf1e91ea408d98c88b1d6179bc92dbe5413d18bdc2a12d7bcd074c8774a331237b070a8676f22dc3dff0bfe7794
- SSDEEP
  
  6144:jUZMhayQebMxU+qRvT0ss0E0voUvn24YU30lZ1sK1CQXoR+1WoXIuyq0ogcq9SsQ:QZpH2gQl/DFEiMP4rbo9q8ZJB
Score

10^/10

metasploit backdoor discovery execution trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoveryexecutiontrojan

behavioral2

metasploitbackdoordiscoveryexecutiontrojan