metasploit | 419490f8184e425c9d2c47aabc49f838635450658d02e153daaaa035f963989e | Triage

Sharing

General

Target

419490f8184e425c9d2c47aabc49f838635450658d02e153daaaa035f963989e
Size

72KB
Sample

240918-zej3qascnh
MD5

c6b7f6fef7a07a467e2fd5e6541782ce
SHA1

319c1b77df40ac43d377170a6b9e13805d54916e
SHA256

419490f8184e425c9d2c47aabc49f838635450658d02e153daaaa035f963989e
SHA512

e52c4503c7cedc252a47cbe9d0629d4b31a6e22783e4d25623bfb2633abe8186de966fab905a5b4083d87eaa795a809706a5f5148c67ffd9a3762a6ab8702914
SSDEEP

1536:IJX24rWVq1Xxr0E44Kd8nEPbdIqDl4z8HuW3Mb+KR0Nc8QsJq39:q22WVq1Xxr0h4KOMIqhfuW3e0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.11.33.196:443

Targets

- Target
  
  419490f8184e425c9d2c47aabc49f838635450658d02e153daaaa035f963989e
- Size
  
  72KB
- MD5
  
  c6b7f6fef7a07a467e2fd5e6541782ce
- SHA1
  
  319c1b77df40ac43d377170a6b9e13805d54916e
- SHA256
  
  419490f8184e425c9d2c47aabc49f838635450658d02e153daaaa035f963989e
- SHA512
  
  e52c4503c7cedc252a47cbe9d0629d4b31a6e22783e4d25623bfb2633abe8186de966fab905a5b4083d87eaa795a809706a5f5148c67ffd9a3762a6ab8702914
- SSDEEP
  
  1536:IJX24rWVq1Xxr0E44Kd8nEPbdIqDl4z8HuW3Mb+KR0Nc8QsJq39:q22WVq1Xxr0h4KOMIqhfuW3e0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan