metasploit

General

Target

lumber.exe
Size

72KB
Sample

241109-lyt55ssdqe
MD5

8c12ef792bb6e0bf3c7fd1a3cd46642a
SHA1

c0967e182486840452ba2b1b291af68d28596f4b
SHA256

823c771434d6b1e8dd4092094c1ea44bda8cccf7f864214fa8a89dffa71f25cb
SHA512

dc0c37e843f58d447189f179d46f16198d4aa39785ea99aadcb379421ffd85fd6d2b16e54b7ae092eaa92a1a455abbe3334e51e554ab7ef6e0ac2d5173cbf286
SSDEEP

768:Ij//2bgdYTpCBQVCayn9KDJpi9ALXwdYZAQ/SJaejzPCHSckzCScx4qXfb+KRBau:Ib/OtC0yMGEwdNJaKMb+KR0Nc8QsJq39

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://54.158.34.216:8080/7Hsk2YaixMw38DbxUNIOiAZX-9aPyK-zT_U2iSasJx9jV9QpI3bF4FGfb_6gogRwb_I5htpqkHcOXW2GC3IVnOreL1LJ36bDtSCPFtK_2_byVOZkZqWrsqvyFf837ZYjEmyn6ni2BWxst55Y5nmdfA8mMvlYE98sHjuB8cPmCC

Targets

- Target
  
  lumber.exe
- Size
  
  72KB
- MD5
  
  8c12ef792bb6e0bf3c7fd1a3cd46642a
- SHA1
  
  c0967e182486840452ba2b1b291af68d28596f4b
- SHA256
  
  823c771434d6b1e8dd4092094c1ea44bda8cccf7f864214fa8a89dffa71f25cb
- SHA512
  
  dc0c37e843f58d447189f179d46f16198d4aa39785ea99aadcb379421ffd85fd6d2b16e54b7ae092eaa92a1a455abbe3334e51e554ab7ef6e0ac2d5173cbf286
- SSDEEP
  
  768:Ij//2bgdYTpCBQVCayn9KDJpi9ALXwdYZAQ/SJaejzPCHSckzCScx4qXfb+KRBau:Ib/OtC0yMGEwdNJaKMb+KR0Nc8QsJq39
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1