metasploit | cd1d97b34c925ae3e29c5f8d104f514922f43a97a26d0f769269bc6d962455a7 | Triage

Sharing

General

Target

97484d374a39f569055fe8dea214ac8f.exe
Size

72KB
Sample

240925-hzym6ssbjn
MD5

97484d374a39f569055fe8dea214ac8f
SHA1

524505be6690de2296f480fdedc1dddc0303d218
SHA256

cd1d97b34c925ae3e29c5f8d104f514922f43a97a26d0f769269bc6d962455a7
SHA512

9d9b95689ae6fe7a9100c6f6a81fc2b21d3b4c4411f94fdfa31be834b1dbbbdede4aa3e7292bf063c90c0247f9d901a36528fca845c2ef1a13eb4515a945de81
SSDEEP

1536:INwVPPeJ+8uDTlR0YkBhqdzGd9/o54CxRQMb+KR0Nc8QsJq39:swVPPeBuHl1kB8dh1xue0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Targets

- Target
  
  97484d374a39f569055fe8dea214ac8f.exe
- Size
  
  72KB
- MD5
  
  97484d374a39f569055fe8dea214ac8f
- SHA1
  
  524505be6690de2296f480fdedc1dddc0303d218
- SHA256
  
  cd1d97b34c925ae3e29c5f8d104f514922f43a97a26d0f769269bc6d962455a7
- SHA512
  
  9d9b95689ae6fe7a9100c6f6a81fc2b21d3b4c4411f94fdfa31be834b1dbbbdede4aa3e7292bf063c90c0247f9d901a36528fca845c2ef1a13eb4515a945de81
- SSDEEP
  
  1536:INwVPPeJ+8uDTlR0YkBhqdzGd9/o54CxRQMb+KR0Nc8QsJq39:swVPPeBuHl1kB8dh1xue0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan