metasploit | 1667b74dbfba5ecd94d57d1efadf8fd28bcbd1b7d19662abdf0888006dd27105 | Triage

Sharing

General

Target

1667b74dbfba5ecd94d57d1efadf8fd28bcbd1b7d19662abdf0888006dd27105
Size

39KB
Sample

241113-yhxmjsxnd1
MD5

81700e2681ba9c46141056de3ab4fb05
SHA1

f400259b43d8cbf39dba7b860501e0e0ca14e046
SHA256

1667b74dbfba5ecd94d57d1efadf8fd28bcbd1b7d19662abdf0888006dd27105
SHA512

e861b36fee17d77e299e0591d734c3c6e481c51a351979882a4c2ec40e48ead11cb218ac63e4c78535a5c5cf737636d2d7a06f5b7d64462504242365fe55a4ff
SSDEEP

384:cl1sels4Hgi5tan7fVcYUokC1AnSvr0tZOwPhi8mU4ByD2uSFvW:61sw1gi5onjlZZz0tZ3hvL4ByDX

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.219:3333

Targets

- Target
  
  1667b74dbfba5ecd94d57d1efadf8fd28bcbd1b7d19662abdf0888006dd27105
- Size
  
  39KB
- MD5
  
  81700e2681ba9c46141056de3ab4fb05
- SHA1
  
  f400259b43d8cbf39dba7b860501e0e0ca14e046
- SHA256
  
  1667b74dbfba5ecd94d57d1efadf8fd28bcbd1b7d19662abdf0888006dd27105
- SHA512
  
  e861b36fee17d77e299e0591d734c3c6e481c51a351979882a4c2ec40e48ead11cb218ac63e4c78535a5c5cf737636d2d7a06f5b7d64462504242365fe55a4ff
- SSDEEP
  
  384:cl1sels4Hgi5tan7fVcYUokC1AnSvr0tZOwPhi8mU4ByD2uSFvW:61sw1gi5onjlZZz0tZ3hvL4ByDX
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan