metasploit | de03540165e643a299ee9771e491f4450bd4994b170c48ed41b0febdf96788b5 | Triage

Sharing

General

Target

de03540165e643a299ee9771e491f4450bd4994b170c48ed41b0febdf96788b5
Size

48KB
Sample

241006-k4a4sawhkr
MD5

6ab37d3aba4a343dbf9ceec584fcf3ed
SHA1

3b8283a3174bee4350105f3204a07e37f2629d88
SHA256

de03540165e643a299ee9771e491f4450bd4994b170c48ed41b0febdf96788b5
SHA512

8dd2d7931bfc462a95f90158de73c7a9f4e02e09e62fdee7c6bbbe6ff72e3ba0911931aedc7a3145e87f6334d0d68da5cbf2ae609435f8be1ce0ddd6a995218a
SSDEEP

768:oFGRzGErFmtIbrE/ukUPP3lLuzZPKq2glh668VCO:oFEmyrEmkUPP3lLuBZ2FHVCO

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

123.60.216.83:28888

Targets

- Target
  
  de03540165e643a299ee9771e491f4450bd4994b170c48ed41b0febdf96788b5
- Size
  
  48KB
- MD5
  
  6ab37d3aba4a343dbf9ceec584fcf3ed
- SHA1
  
  3b8283a3174bee4350105f3204a07e37f2629d88
- SHA256
  
  de03540165e643a299ee9771e491f4450bd4994b170c48ed41b0febdf96788b5
- SHA512
  
  8dd2d7931bfc462a95f90158de73c7a9f4e02e09e62fdee7c6bbbe6ff72e3ba0911931aedc7a3145e87f6334d0d68da5cbf2ae609435f8be1ce0ddd6a995218a
- SSDEEP
  
  768:oFGRzGErFmtIbrE/ukUPP3lLuzZPKq2glh668VCO:oFEmyrEmkUPP3lLuBZ2FHVCO
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan