metasploit | b498e41db3648dc3b7d4ee9069049f9205e79ed99c6c1a05a4bd2f43d61e3046 | Triage

Sharing

General

Target

b498e41db3648dc3b7d4ee9069049f9205e79ed99c6c1a05a4bd2f43d61e3046
Size

47KB
Sample

241115-hpj22a1akj
MD5

62ffe60846031746379fa744995e89bf
SHA1

f173e7b43ba4f1428201f644bc426662454ed598
SHA256

b498e41db3648dc3b7d4ee9069049f9205e79ed99c6c1a05a4bd2f43d61e3046
SHA512

a44ee98554ed2b23e39e2410cbe9872a8e00d43103fca392a82b3407d2d41edef29a525d683eee49a107a8fcb342711b58536c2d525417e30cf023c13b60ffee
SSDEEP

768:6oB2hQJq7RRNOU6a6wwF9Dqc+D9XWqIn/wPM27yLG1:6oIhQJWr0U+rDqc+5Gq5PuLQ

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.133.150:8788/bNdH

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET CLR 2.0.50727)

Targets

- Target
  
  b498e41db3648dc3b7d4ee9069049f9205e79ed99c6c1a05a4bd2f43d61e3046
- Size
  
  47KB
- MD5
  
  62ffe60846031746379fa744995e89bf
- SHA1
  
  f173e7b43ba4f1428201f644bc426662454ed598
- SHA256
  
  b498e41db3648dc3b7d4ee9069049f9205e79ed99c6c1a05a4bd2f43d61e3046
- SHA512
  
  a44ee98554ed2b23e39e2410cbe9872a8e00d43103fca392a82b3407d2d41edef29a525d683eee49a107a8fcb342711b58536c2d525417e30cf023c13b60ffee
- SSDEEP
  
  768:6oB2hQJq7RRNOU6a6wwF9Dqc+D9XWqIn/wPM27yLG1:6oIhQJWr0U+rDqc+5Gq5PuLQ
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2