metasploit | d5d603ee532a68384fd98cced296eb20cb68651f79b6489cf2bfe4f62cd2f3a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5d603ee532a68384fd98cced296eb20cb68651f79b6489cf2bfe4f62cd2f3a5
Size

97KB
Sample

241001-pra1gazbpk
MD5

64721cd9b912e1d3c19e7e385d907f1d
SHA1

6797c33c542490f5c05f7c3e06abab789719b1ca
SHA256

d5d603ee532a68384fd98cced296eb20cb68651f79b6489cf2bfe4f62cd2f3a5
SHA512

534be9ea6d1df8840bcba35e3913e17f0d51014486220a487577a69f17b80fe2117be412d4b1d440d7a86e80c7f7fa75d5711f3992bfc7e4a2f6489d463c71d5
SSDEEP

1536:mxBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZIvCBj:m1fYvCl

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.206.129:4309

Targets

- Target
  
  d5d603ee532a68384fd98cced296eb20cb68651f79b6489cf2bfe4f62cd2f3a5
- Size
  
  97KB
- MD5
  
  64721cd9b912e1d3c19e7e385d907f1d
- SHA1
  
  6797c33c542490f5c05f7c3e06abab789719b1ca
- SHA256
  
  d5d603ee532a68384fd98cced296eb20cb68651f79b6489cf2bfe4f62cd2f3a5
- SHA512
  
  534be9ea6d1df8840bcba35e3913e17f0d51014486220a487577a69f17b80fe2117be412d4b1d440d7a86e80c7f7fa75d5711f3992bfc7e4a2f6489d463c71d5
- SSDEEP
  
  1536:mxBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZIvCBj:m1fYvCl
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2