metasploit | 0d566dcfee4d295f95cfc3832b995a129f963cf80dae2deecfa40cf026f35398 | Triage

Sharing

General

Target

32282cfa34ebd3aa220bb196c683a46e.bin
Size

43KB
Sample

241018-bllccsxend
MD5

6f31f03091345bbf5f7b340b1ccb729c
SHA1

b236c86f73f8a2c7bda6acd3e0fe9c905e8bf5e7
SHA256

0d566dcfee4d295f95cfc3832b995a129f963cf80dae2deecfa40cf026f35398
SHA512

0903a99d4710b2ec76579bb44728407a70bb9a1b3b954d2a310401d49f56fc8806571ecff0f5d90a8408f2cc66ab67cacc921b396f5866a82dbf0c9aafb9213f
SSDEEP

768:xJxW5EkQsINmetxIuEEJLcAmbUgAKz3+Y1Sc3Kz/VBeH4XZYJpSkW6jXD:xuMsILtYEJImKz3+cS2K/wPQkbD

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.204.90.65:4444

Targets

- Target
  
  3c3ce0355bfa42b379830b93a76cffd32fceed54e6b549ae4a1132ca30b392ff.exe
- Size
  
  72KB
- MD5
  
  32282cfa34ebd3aa220bb196c683a46e
- SHA1
  
  4299a9a8e97a6ad330c1e0e2cc3368834a40f0cb
- SHA256
  
  3c3ce0355bfa42b379830b93a76cffd32fceed54e6b549ae4a1132ca30b392ff
- SHA512
  
  b567f434a313d270a53945a75d3303db179964faabde22786b37e8399b03d2ab664f11d03f93f5e22ea1aa8b38b1481fcdd302e688c5c1e9c3f1e3516ceebfb4
- SSDEEP
  
  1536:ISobLjmZ0irkrNHsFOjzPkA+2QMb+KR0Nc8QsJq39:uHKZ1eVzskQe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan