metasploit | e1579bd0d471cdfbcadbb1b27454da080a6a5e13021033208b7592ccea607320 | Triage

Sharing

General

Target

e1579bd0d471cdfbcadbb1b27454da080a6a5e13021033208b7592ccea607320.exe
Size

72KB
Sample

241107-dxckpswrdn
MD5

8597aa1db8457c9b8e2e636c55a56978
SHA1

d6ee74a13ee56eb7556e88b5b646e1c3581bf163
SHA256

e1579bd0d471cdfbcadbb1b27454da080a6a5e13021033208b7592ccea607320
SHA512

943299ec65c1ebf0e74725648419ca76bdba72cbc39accb63305f57bba45c88227e9df80aebea9dfe47014c534e7067e7e844584356c6a39097d816c27c6a22f
SSDEEP

1536:IufFI9hcqd4hsUg072KIw3GbzToOMb+KR0Nc8QsJq39:ffFIIqCsl0SPw3ge0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://downsexv.com:8080/pptFudI4N_bZd9h2vlE2HgX6nJupnvnNvPpodtqLmxX2OC5MJtjR8Cw2hx7Jj0FM_ofkLnmJ

Targets

- Target
  
  e1579bd0d471cdfbcadbb1b27454da080a6a5e13021033208b7592ccea607320.exe
- Size
  
  72KB
- MD5
  
  8597aa1db8457c9b8e2e636c55a56978
- SHA1
  
  d6ee74a13ee56eb7556e88b5b646e1c3581bf163
- SHA256
  
  e1579bd0d471cdfbcadbb1b27454da080a6a5e13021033208b7592ccea607320
- SHA512
  
  943299ec65c1ebf0e74725648419ca76bdba72cbc39accb63305f57bba45c88227e9df80aebea9dfe47014c534e7067e7e844584356c6a39097d816c27c6a22f
- SSDEEP
  
  1536:IufFI9hcqd4hsUg072KIw3GbzToOMb+KR0Nc8QsJq39:ffFIIqCsl0SPw3ge0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan