metasploit | bcdf3447b4525a17a5a4e68602644b6dd14b368b64c80236525f1c281fed2622 | Triage

Sharing

General

Target

bcdf3447b4525a17a5a4e68602644b6dd14b368b64c80236525f1c281fed2622N
Size

72KB
Sample

240920-fgmrvazekq
MD5

125a1a8f286c535b5d62838d8a480570
SHA1

645c7ed41e97f8789f309d1cce69cc4c9b97f76d
SHA256

bcdf3447b4525a17a5a4e68602644b6dd14b368b64c80236525f1c281fed2622
SHA512

d941351a8731884a459d7ae61b2079d0f2cc2e5c1b15ca7d4e74f6fd4b9f4375146f70e3e1056323cfcb8bcb732ecbf4d3beb654f58b4674095524e4b9ab1c7a
SSDEEP

1536:I28ksADeH55sC/6rQcQncIwFE0os9LmMb+KR0Nc8QsJq39:tsADoBSQEFE0p9Lme0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.246:4444

Targets

- Target
  
  bcdf3447b4525a17a5a4e68602644b6dd14b368b64c80236525f1c281fed2622N
- Size
  
  72KB
- MD5
  
  125a1a8f286c535b5d62838d8a480570
- SHA1
  
  645c7ed41e97f8789f309d1cce69cc4c9b97f76d
- SHA256
  
  bcdf3447b4525a17a5a4e68602644b6dd14b368b64c80236525f1c281fed2622
- SHA512
  
  d941351a8731884a459d7ae61b2079d0f2cc2e5c1b15ca7d4e74f6fd4b9f4375146f70e3e1056323cfcb8bcb732ecbf4d3beb654f58b4674095524e4b9ab1c7a
- SSDEEP
  
  1536:I28ksADeH55sC/6rQcQncIwFE0os9LmMb+KR0Nc8QsJq39:tsADoBSQEFE0p9Lme0Nc8QsC9
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan