metasploit

General

Target

file.exe
Size

72KB
Sample

240920-q34ycszaqb
MD5

f52a6c6e1c8be6ea65f385f16d2680b6
SHA1

bec6362770c6764a11c0b8e5bb6344ce6f4c398c
SHA256

6b3215f08df986ac0d45a243858e9fbf9a6457600667fcb5a5debfb5e78acf5f
SHA512

fc1049ad26a5bc25acabe4e7e92bf8be1c732568c3bb84898b63741d073622734de2b19bd0cf6e4fad68bb248ce2391b097490e679f72b5d60b02ae2d1f32a0f
SSDEEP

1536:IR800mMcfeNbN6QRwO+h7Mb+KR0Nc8QsJq39:o7acOIQGO+Je0Nc8QsC9

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://89.197.154.116:7810/4_C7W2cwSJ5TNFI1NdglBwJJjpY9c-aimhKxyeadkNusu01pd1-jlYLOLzdP_4xfXF1LYV5jqBl8nywIpe7ggb_u3A36_19q36EdsOuFfYGTEFXg0fy341ZneWstwyacOHgRBAiMg2K53j4E5Cf8uImhogXemNhJLbHgB

Targets

- Target
  
  file.exe
- Size
  
  72KB
- MD5
  
  f52a6c6e1c8be6ea65f385f16d2680b6
- SHA1
  
  bec6362770c6764a11c0b8e5bb6344ce6f4c398c
- SHA256
  
  6b3215f08df986ac0d45a243858e9fbf9a6457600667fcb5a5debfb5e78acf5f
- SHA512
  
  fc1049ad26a5bc25acabe4e7e92bf8be1c732568c3bb84898b63741d073622734de2b19bd0cf6e4fad68bb248ce2391b097490e679f72b5d60b02ae2d1f32a0f
- SSDEEP
  
  1536:IR800mMcfeNbN6QRwO+h7Mb+KR0Nc8QsJq39:o7acOIQGO+Je0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2