metasploit | 439eea84daf269179762e48c79be05149e1a3acc7757f1fa5edafcfad95b66d3 | Triage

Sharing

General

Target

d708f16cc38b267f2fc0771648a6cd50N
Size

112KB
Sample

240913-xqbvdateka
MD5

d708f16cc38b267f2fc0771648a6cd50
SHA1

857f125cff0db832e79b74e83ba4119e69f37647
SHA256

439eea84daf269179762e48c79be05149e1a3acc7757f1fa5edafcfad95b66d3
SHA512

e3ba54d10c11772bb1651fb1adb6d8a50bc39f9ae458c21a5e1b3434826b406981010f2a72783c4c5a6948ece9c29e22181741873aa06c179c3ab88399a24c3b
SSDEEP

3072:fdZ79Qe1onM91KWe1m85jrZWzoXL1BsC:lZ7loMG5Oob

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

86.108.92.205:123

Targets

- Target
  
  d708f16cc38b267f2fc0771648a6cd50N
- Size
  
  112KB
- MD5
  
  d708f16cc38b267f2fc0771648a6cd50
- SHA1
  
  857f125cff0db832e79b74e83ba4119e69f37647
- SHA256
  
  439eea84daf269179762e48c79be05149e1a3acc7757f1fa5edafcfad95b66d3
- SHA512
  
  e3ba54d10c11772bb1651fb1adb6d8a50bc39f9ae458c21a5e1b3434826b406981010f2a72783c4c5a6948ece9c29e22181741873aa06c179c3ab88399a24c3b
- SSDEEP
  
  3072:fdZ79Qe1onM91KWe1m85jrZWzoXL1BsC:lZ7loMG5Oob
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan