metasploit | 47fb7d8c03c58a9c0f5bb1fc4fae03abd3d50e9169e753530d8be96949e767ff | Triage

Sharing

General

Target

47fb7d8c03c58a9c0f5bb1fc4fae03abd3d50e9169e753530d8be96949e767ff.exe
Size

72KB
Sample

241114-gay2zaveqb
MD5

963b5f425400ac272f9c3da0dca0c49e
SHA1

987be0ee528177c2edd80f0fbb21b616ed66d683
SHA256

47fb7d8c03c58a9c0f5bb1fc4fae03abd3d50e9169e753530d8be96949e767ff
SHA512

32f56df97e4a7e563d2bbcd2b1f1270e9aec871835e664d951e6b9e1bfd21ed4539888fe0560cdadb87e90f9030ec122c8b8cd848b620032a0ef41a6d5977581
SSDEEP

1536:ImMyhVdP3RQZZ/QECCRU1f4HUlLWuKeBmFN1fBLHozMb+KR0Nc8QsJq3H:nMsVdP3RQrNPU1f4HEnsTVBjee0Nc8Qh

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.210.132:443

Targets

- Target
  
  47fb7d8c03c58a9c0f5bb1fc4fae03abd3d50e9169e753530d8be96949e767ff.exe
- Size
  
  72KB
- MD5
  
  963b5f425400ac272f9c3da0dca0c49e
- SHA1
  
  987be0ee528177c2edd80f0fbb21b616ed66d683
- SHA256
  
  47fb7d8c03c58a9c0f5bb1fc4fae03abd3d50e9169e753530d8be96949e767ff
- SHA512
  
  32f56df97e4a7e563d2bbcd2b1f1270e9aec871835e664d951e6b9e1bfd21ed4539888fe0560cdadb87e90f9030ec122c8b8cd848b620032a0ef41a6d5977581
- SSDEEP
  
  1536:ImMyhVdP3RQZZ/QECCRU1f4HUlLWuKeBmFN1fBLHozMb+KR0Nc8QsJq3H:nMsVdP3RQrNPU1f4HEnsTVBjee0Nc8Qh
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan