metasploit | 161d4aed88bf39f86b4d300682ed85cc12dd083096afb143430028bd5f3ac1f8 | Triage

Sharing

General

Target

161d4aed88bf39f86b4d300682ed85cc12dd083096afb143430028bd5f3ac1f8N.exe
Size

72KB
Sample

240925-1p9a2azbpp
MD5

56ce737abbdf09af506f90f5698c8bb0
SHA1

caef3e369fe83136c0425c9b96b604e7f5a97bba
SHA256

161d4aed88bf39f86b4d300682ed85cc12dd083096afb143430028bd5f3ac1f8
SHA512

931b83016111d01a3fef934936d9fff8c27f8e63b33b6874fe39b2a66185a59f260a8a9656b882ee367969188b7def0997cc8716dc98951921e1cc75374c48f6
SSDEEP

1536:IjHF6BQ3EQgkRsVJppueImfcNuOTi/vrNlEMb+KR0Nc8QsJq39:+YBy1sVJLhEMrNlEe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Targets

- Target
  
  161d4aed88bf39f86b4d300682ed85cc12dd083096afb143430028bd5f3ac1f8N.exe
- Size
  
  72KB
- MD5
  
  56ce737abbdf09af506f90f5698c8bb0
- SHA1
  
  caef3e369fe83136c0425c9b96b604e7f5a97bba
- SHA256
  
  161d4aed88bf39f86b4d300682ed85cc12dd083096afb143430028bd5f3ac1f8
- SHA512
  
  931b83016111d01a3fef934936d9fff8c27f8e63b33b6874fe39b2a66185a59f260a8a9656b882ee367969188b7def0997cc8716dc98951921e1cc75374c48f6
- SSDEEP
  
  1536:IjHF6BQ3EQgkRsVJppueImfcNuOTi/vrNlEMb+KR0Nc8QsJq39:+YBy1sVJLhEMrNlEe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan