metasploit | 74ded7b754eb44024853e1f5251630ac7ba7a312ecf34d8b288127541bf48223 | Triage

Sharing

General

Target

74ded7b754eb44024853e1f5251630ac7ba7a312ecf34d8b288127541bf48223N
Size

97KB
Sample

241110-fkfgyazepl
MD5

f8b73b531f7f04c84c02fbb3434b0e60
SHA1

eab88325e7bfa48502e6f52c9877fba3e9597bc3
SHA256

74ded7b754eb44024853e1f5251630ac7ba7a312ecf34d8b288127541bf48223
SHA512

6f3e2c504d6fd4e834be4471282c94da035265ad9142a93b918630f4177ecc5b677372e6590786872e167db31910eccb2eadab8602d04f442a00c73a1ece4fea
SSDEEP

1536:cBXbfBnHPnR/tFHsuzeWqycBYmf7q+LMhLkIG:cphvFHrtbk7

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.111:444

Targets

- Target
  
  74ded7b754eb44024853e1f5251630ac7ba7a312ecf34d8b288127541bf48223N
- Size
  
  97KB
- MD5
  
  f8b73b531f7f04c84c02fbb3434b0e60
- SHA1
  
  eab88325e7bfa48502e6f52c9877fba3e9597bc3
- SHA256
  
  74ded7b754eb44024853e1f5251630ac7ba7a312ecf34d8b288127541bf48223
- SHA512
  
  6f3e2c504d6fd4e834be4471282c94da035265ad9142a93b918630f4177ecc5b677372e6590786872e167db31910eccb2eadab8602d04f442a00c73a1ece4fea
- SSDEEP
  
  1536:cBXbfBnHPnR/tFHsuzeWqycBYmf7q+LMhLkIG:cphvFHrtbk7
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan