metasploit

General

Target

80bb70b192c18729f94ab26689d4884130909b6d7d34100b901dc153fd73f70bN
Size

72KB
Sample

240918-klwb1asekn
MD5

f8d61826b194dcb1a2bff00ac0612e10
SHA1

6cddda7bbf3db56fc6912479498be3d08bcf9032
SHA256

80bb70b192c18729f94ab26689d4884130909b6d7d34100b901dc153fd73f70b
SHA512

2a55742b2cb22e1a7b2efa5a3fb5e1238b5ca42add2befa63f0ac0ba1ee97d8ecded7dca790be4bb1100d532f903ab0dca6e78b15537d499ef7e92f502df98b0
SSDEEP

1536:IA1/RjlIWr2rW1FGDphgd5QqPCPMxRIMb+KR0Nc8QsJq39:rRgEaUd5lCPde0Nc8QsC9

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.101.12:4444/hJ4_nmuK2gd3IXYgEcfMqwQsMjrPPC1xY-BDZL-htLtAs06fOp8SplxivNi

Targets

- Target
  
  80bb70b192c18729f94ab26689d4884130909b6d7d34100b901dc153fd73f70bN
- Size
  
  72KB
- MD5
  
  f8d61826b194dcb1a2bff00ac0612e10
- SHA1
  
  6cddda7bbf3db56fc6912479498be3d08bcf9032
- SHA256
  
  80bb70b192c18729f94ab26689d4884130909b6d7d34100b901dc153fd73f70b
- SHA512
  
  2a55742b2cb22e1a7b2efa5a3fb5e1238b5ca42add2befa63f0ac0ba1ee97d8ecded7dca790be4bb1100d532f903ab0dca6e78b15537d499ef7e92f502df98b0
- SSDEEP
  
  1536:IA1/RjlIWr2rW1FGDphgd5QqPCPMxRIMb+KR0Nc8QsJq39:rRgEaUd5lCPde0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2