metasploit | 3f89dbd9ad2f7663dd8daf86a3654b9babe7fb5c1d35aa7a70dcaa15c904daab | Triage

Sharing

General

Target

3f89dbd9ad2f7663dd8daf86a3654b9babe7fb5c1d35aa7a70dcaa15c904daab
Size

72KB
Sample

240922-y92etawcnc
MD5

44c443f8ecfd5cf16117c8fba528c93f
SHA1

c085d9d2e649335abd25345f6c8dabfd08a6d7a0
SHA256

3f89dbd9ad2f7663dd8daf86a3654b9babe7fb5c1d35aa7a70dcaa15c904daab
SHA512

77de16d43992547d4fb11d47342fde448bc0f65c8063325b4aefc7543258d0dc205ea772c798541855e4db5383afd92438f5e215472a9db921a47d7e0b588d97
SSDEEP

1536:IZS6XlQnVgxNJBIDxbhr3e8WgbIa2FqGnMb+KR0Nc8QsJq39:GSOl06JBIDJh3hnsa2FqGne0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:12345

Targets

- Target
  
  3f89dbd9ad2f7663dd8daf86a3654b9babe7fb5c1d35aa7a70dcaa15c904daab
- Size
  
  72KB
- MD5
  
  44c443f8ecfd5cf16117c8fba528c93f
- SHA1
  
  c085d9d2e649335abd25345f6c8dabfd08a6d7a0
- SHA256
  
  3f89dbd9ad2f7663dd8daf86a3654b9babe7fb5c1d35aa7a70dcaa15c904daab
- SHA512
  
  77de16d43992547d4fb11d47342fde448bc0f65c8063325b4aefc7543258d0dc205ea772c798541855e4db5383afd92438f5e215472a9db921a47d7e0b588d97
- SSDEEP
  
  1536:IZS6XlQnVgxNJBIDxbhr3e8WgbIa2FqGnMb+KR0Nc8QsJq39:GSOl06JBIDJh3hnsa2FqGne0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan