metasploit | 13fb7ec7f73c7ee3afde47d81b03c1f342d82807ecdb1a492c8b256ed9d93e0c | Triage

Sharing

General

Target

13fb7ec7f73c7ee3afde47d81b03c1f342d82807ecdb1a492c8b256ed9d93e0c
Size

22KB
Sample

241114-p7ezcsynew
MD5

ab048bdc9986f64b2f8164635d9df4bf
SHA1

4824841a14b0bfaf94812bfc62b39d06e8278da9
SHA256

13fb7ec7f73c7ee3afde47d81b03c1f342d82807ecdb1a492c8b256ed9d93e0c
SHA512

5c013a3994995200b2a253115fa5cd0cccc86ed86e5ba1a56fc75000ec377442c88b3c32b778c0473ef7f878962bc223cf4775e3457b2e6f04003806801e2dd7
SSDEEP

384:rCWGv4O8zvI3qQdJzLJO2Kx8AnQSwwvBsS5zByD2uWI8ot7F:r3GX8zvI3jpFOPZBsqzByDNN

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.205:4444

Targets

- Target
  
  13fb7ec7f73c7ee3afde47d81b03c1f342d82807ecdb1a492c8b256ed9d93e0c
- Size
  
  22KB
- MD5
  
  ab048bdc9986f64b2f8164635d9df4bf
- SHA1
  
  4824841a14b0bfaf94812bfc62b39d06e8278da9
- SHA256
  
  13fb7ec7f73c7ee3afde47d81b03c1f342d82807ecdb1a492c8b256ed9d93e0c
- SHA512
  
  5c013a3994995200b2a253115fa5cd0cccc86ed86e5ba1a56fc75000ec377442c88b3c32b778c0473ef7f878962bc223cf4775e3457b2e6f04003806801e2dd7
- SSDEEP
  
  384:rCWGv4O8zvI3qQdJzLJO2Kx8AnQSwwvBsS5zByD2uWI8ot7F:r3GX8zvI3jpFOPZBsqzByDNN
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan