metasploit | f62297411ad7cc7320d21b01948087b8f8fe169fd4fbc3a2af3f7615f1863c09 | Triage

Sharing

General

Target

2bbfef7a1f3451b005cf0dd3d4e275da.bin
Size

43KB
Sample

241106-bgt4ps1pcw
MD5

56903729be0900f0ec3442c981c503f6
SHA1

d229db6277753fcd47d4a619ec3d5044d4ea6523
SHA256

f62297411ad7cc7320d21b01948087b8f8fe169fd4fbc3a2af3f7615f1863c09
SHA512

4062ec3ce05322a7cf13bb32585e9625139b6986076023cfba42dd5b623b46c52aea9ebbd1d557c59f16ff9e69f926aa160ff7f43c48b89cd1a789abbbd96a0d
SSDEEP

768:ZWIUUNZZoyxTXJD6FDbcXuPtmej1SRpeoIwWfFA42m5LjmyU:sIUEZZoUXJDIDtVb1SdwWm5LY

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  
  65f1634212dadb9f6291190de6e4afd74cfd509e9c1d623f686ad9680512e5a1.exe
- Size
  
  72KB
- MD5
  
  2bbfef7a1f3451b005cf0dd3d4e275da
- SHA1
  
  7f8aa8879b0e64cab0dfbdf3390665dec9e652ce
- SHA256
  
  65f1634212dadb9f6291190de6e4afd74cfd509e9c1d623f686ad9680512e5a1
- SHA512
  
  c157a9d09398fb49434c5b55edc8d120110195196dfac639a87f7e2c3c77e2a96159fea7d0bd4f6b3f06ab73c939e88a0809a3da9d52660ea206b3faa6e70912
- SSDEEP
  
  1536:IHmw1yN0JCWjR+U/RUkivw5ZxisGip/MMkpjeMb+KR0Nc8QsJq39:ioSJCWjRuxo4GU31ee0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan