metasploit | d271f402b872888e8dd36d1c95f844b9c941840d3f791e51c92dc58bf8b9fa41 | Triage

Sharing

General

Target

d271f402b872888e8dd36d1c95f844b9c941840d3f791e51c92dc58bf8b9fa41N
Size

72KB
Sample

240917-dlt1ls1fpf
MD5

a9755513e516ca67acb83877e4fa4930
SHA1

3821df4d1f22f164c54c9529517b7a5970b0bdb0
SHA256

d271f402b872888e8dd36d1c95f844b9c941840d3f791e51c92dc58bf8b9fa41
SHA512

93d7207dab5382e785db40f5606426ce8941f2f53f66d53aa4bd230d967b481e4f9e394af21db85f6ae7cee6a8d9c5aaeb3a4c8f7589566eab52280b7d6ea715
SSDEEP

1536:IwfrTRvGDDkoFdtfYVomuTIZv9X9+Mb+KR0Nc8QsJq39:lfrJfydWebT09Xge0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  
  d271f402b872888e8dd36d1c95f844b9c941840d3f791e51c92dc58bf8b9fa41N
- Size
  
  72KB
- MD5
  
  a9755513e516ca67acb83877e4fa4930
- SHA1
  
  3821df4d1f22f164c54c9529517b7a5970b0bdb0
- SHA256
  
  d271f402b872888e8dd36d1c95f844b9c941840d3f791e51c92dc58bf8b9fa41
- SHA512
  
  93d7207dab5382e785db40f5606426ce8941f2f53f66d53aa4bd230d967b481e4f9e394af21db85f6ae7cee6a8d9c5aaeb3a4c8f7589566eab52280b7d6ea715
- SSDEEP
  
  1536:IwfrTRvGDDkoFdtfYVomuTIZv9X9+Mb+KR0Nc8QsJq39:lfrJfydWebT09Xge0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan