metasploit | 924806c0d55ddf41c68a8a786333edd7b63c619259ad1910ac1063ba0f20873e | Triage

Sharing

General

Target

924806c0d55ddf41c68a8a786333edd7b63c619259ad1910ac1063ba0f20873e
Size

14KB
Sample

240914-h6757asckp
MD5

48a8525a2f851ffeaf762789cf2043b7
SHA1

ccee6d3ef299b607036e701e89d697d9d3dafa1c
SHA256

924806c0d55ddf41c68a8a786333edd7b63c619259ad1910ac1063ba0f20873e
SHA512

ed5fa11d06d7d56285737b6061c96308220dea81c367a4f2a3e6c828648a62eff111f27b43f2dbd35bc85c62e3be61a835602de648435a4ed964ddfb366f40b6
SSDEEP

192:q3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOc16Z5rOejDMN1:BMCfrfQ6tBSIm1QAeUN1

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://81.70.254.166:3306/G5iw

Attributes

headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MATMJS)

Targets

- Target
  
  924806c0d55ddf41c68a8a786333edd7b63c619259ad1910ac1063ba0f20873e
- Size
  
  14KB
- MD5
  
  48a8525a2f851ffeaf762789cf2043b7
- SHA1
  
  ccee6d3ef299b607036e701e89d697d9d3dafa1c
- SHA256
  
  924806c0d55ddf41c68a8a786333edd7b63c619259ad1910ac1063ba0f20873e
- SHA512
  
  ed5fa11d06d7d56285737b6061c96308220dea81c367a4f2a3e6c828648a62eff111f27b43f2dbd35bc85c62e3be61a835602de648435a4ed964ddfb366f40b6
- SSDEEP
  
  192:q3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOc16Z5rOejDMN1:BMCfrfQ6tBSIm1QAeUN1
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan