metasploit | 6b6e1a7127bc7d24c4cbea5d3103edb52eb32f66d5c746d33a4e926e9741e7d0 | Triage

Sharing

General

Target

6b6e1a7127bc7d24c4cbea5d3103edb52eb32f66d5c746d33a4e926e9741e7d0
Size

149KB
Sample

240913-xll5jstbqf
MD5

9e63c6541cec25f68fa93ff840464e0e
SHA1

48a0732a624e5718d529b690ad5e38a6e7559dfa
SHA256

6b6e1a7127bc7d24c4cbea5d3103edb52eb32f66d5c746d33a4e926e9741e7d0
SHA512

f02250153efeb2243b63fa5c779abb353c0c7905e4a9de3d33030fe89f8760c235ef2bcb0e458b499a36dcf132e5da4684fb9eedcdb904c98af8b9a8b0556a3b
SSDEEP

3072:7RKcFWBPKTUCi0oz54Ws3RfwAZ82Yi+tS7hXcrDRo:77WBPTrewAZ8hkge

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.72.182:666

Targets

- Target
  
  6b6e1a7127bc7d24c4cbea5d3103edb52eb32f66d5c746d33a4e926e9741e7d0
- Size
  
  149KB
- MD5
  
  9e63c6541cec25f68fa93ff840464e0e
- SHA1
  
  48a0732a624e5718d529b690ad5e38a6e7559dfa
- SHA256
  
  6b6e1a7127bc7d24c4cbea5d3103edb52eb32f66d5c746d33a4e926e9741e7d0
- SHA512
  
  f02250153efeb2243b63fa5c779abb353c0c7905e4a9de3d33030fe89f8760c235ef2bcb0e458b499a36dcf132e5da4684fb9eedcdb904c98af8b9a8b0556a3b
- SSDEEP
  
  3072:7RKcFWBPKTUCi0oz54Ws3RfwAZ82Yi+tS7hXcrDRo:77WBPTrewAZ8hkge
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan