metasploit | 30bea1aa6115bf09c8a6021a6dce36a0b72d7e6bbced3befda507bd91ef4d952 | Triage

Sharing

General

Target

30bea1aa6115bf09c8a6021a6dce36a0b72d7e6bbced3befda507bd91ef4d952
Size

9KB
Sample

241102-zy8keswbmk
MD5

a77337c06e12fdfa58bc50684d0da226
SHA1

6ff9f7f26aea6347545027041a8275731743ab66
SHA256

30bea1aa6115bf09c8a6021a6dce36a0b72d7e6bbced3befda507bd91ef4d952
SHA512

8fc235ba8809584a37e889f2d944a31653e8a8127b8720800012db2cea85208f72d8d405c372af59777ba06d1d10632b6333df3765c34417f0318077a3294797
SSDEEP

192:x99whrkHWJdjjOfzO+w7E5pz6fMzkVwZO:xr+r3JdjjBz7SuWO

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.3.147:4444/3orH

Attributes

headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUSSEM)

Targets

- Target
  
  30bea1aa6115bf09c8a6021a6dce36a0b72d7e6bbced3befda507bd91ef4d952
- Size
  
  9KB
- MD5
  
  a77337c06e12fdfa58bc50684d0da226
- SHA1
  
  6ff9f7f26aea6347545027041a8275731743ab66
- SHA256
  
  30bea1aa6115bf09c8a6021a6dce36a0b72d7e6bbced3befda507bd91ef4d952
- SHA512
  
  8fc235ba8809584a37e889f2d944a31653e8a8127b8720800012db2cea85208f72d8d405c372af59777ba06d1d10632b6333df3765c34417f0318077a3294797
- SSDEEP
  
  192:x99whrkHWJdjjOfzO+w7E5pz6fMzkVwZO:xr+r3JdjjBz7SuWO
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan