metasploit

General

Target

shell3.exe
Size

72KB
Sample

241105-mv8pssypcy
MD5

1df4489ae4f3085d607481001c3b5edd
SHA1

3e7e1dd682f4afd7a955f0fdbbe57ed3c28fc9b7
SHA256

45cb9cc6168ab90bd8eef4d98181dba1b6e8f395004cbd0dc930e9e4c388ebe0
SHA512

1455ae03e93534693d82efad466f936f79e4497722c9eb44889bdebdab407218a18ca58200c46e4f4b731537955ba4713088933ca3c02bc3d7d075a1daf82978
SSDEEP

1536:IwG3aBwz5WnuHJnhbS3g5y4xnMb+KR0Nc8QsJq39:7GtWnyJnhWeyEne0Nc8QsC9

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://118.25.85.104:9443/6Oqh-tBYc5a9Grwb2OZSEgGYl1sHNWQGwzFrp2NwXQSl6kvaLGNWGt4NOH1WV6SZU-UdfCyLrdCWs4YVlv0cwp_n9sSTWiF-NGAG-WM2esr7RNrHgdJsWy4vbSJA4ryfVVpBp5KPtIHKNJUnLHq8oXgEY

Targets

- Target
  
  shell3.exe
- Size
  
  72KB
- MD5
  
  1df4489ae4f3085d607481001c3b5edd
- SHA1
  
  3e7e1dd682f4afd7a955f0fdbbe57ed3c28fc9b7
- SHA256
  
  45cb9cc6168ab90bd8eef4d98181dba1b6e8f395004cbd0dc930e9e4c388ebe0
- SHA512
  
  1455ae03e93534693d82efad466f936f79e4497722c9eb44889bdebdab407218a18ca58200c46e4f4b731537955ba4713088933ca3c02bc3d7d075a1daf82978
- SSDEEP
  
  1536:IwG3aBwz5WnuHJnhbS3g5y4xnMb+KR0Nc8QsJq39:7GtWnyJnhWeyEne0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Metasploit family

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2