metasploit | 113915cdd257cdf611053c1d08f8b20f216a83b212dd1dc610efc2dc724c701f | Triage

Sharing

General

Target

113915cdd257cdf611053c1d08f8b20f216a83b212dd1dc610efc2dc724c701f
Size

111KB
Sample

240920-g5n59atamp
MD5

1d09ccd66e5f3ac0b40475e353a35c06
SHA1

a65591e7318b734b517e14b23d3f1a473f3f0199
SHA256

113915cdd257cdf611053c1d08f8b20f216a83b212dd1dc610efc2dc724c701f
SHA512

7a4456ab6721af1c4d5acad4bec162bb94e79737df545de4862dd464ce6a78291c2a38a87aa5e404182a488eb06dcd07616c415313b3bc4dd1e970b966d7fac8
SSDEEP

3072:sGX1SY8SpIbSeHlOGP3qqTTo+rtX1IA/r/R1bI3:sM5IbSIT3hr5n1bI3

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

43.136.32.239:4433

Targets

- Target
  
  113915cdd257cdf611053c1d08f8b20f216a83b212dd1dc610efc2dc724c701f
- Size
  
  111KB
- MD5
  
  1d09ccd66e5f3ac0b40475e353a35c06
- SHA1
  
  a65591e7318b734b517e14b23d3f1a473f3f0199
- SHA256
  
  113915cdd257cdf611053c1d08f8b20f216a83b212dd1dc610efc2dc724c701f
- SHA512
  
  7a4456ab6721af1c4d5acad4bec162bb94e79737df545de4862dd464ce6a78291c2a38a87aa5e404182a488eb06dcd07616c415313b3bc4dd1e970b966d7fac8
- SSDEEP
  
  3072:sGX1SY8SpIbSeHlOGP3qqTTo+rtX1IA/r/R1bI3:sM5IbSIT3hr5n1bI3
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan