metasploit | 41d75595cc2defeabca00134a9d9a83c8b036f9f11e2b9988c77bb43320ed6e7 | Triage

Sharing

General

Target

41d75595cc2defeabca00134a9d9a83c8b036f9f11e2b9988c77bb43320ed6e7.exe
Size

101KB
Sample

241119-ragssswpey
MD5

b043afcf12cae637031f638c7b7b1194
SHA1

307ac57eb43562a337ab798c8b72a1c932c2a224
SHA256

41d75595cc2defeabca00134a9d9a83c8b036f9f11e2b9988c77bb43320ed6e7
SHA512

a077849bd0acf7bfa75088ba22294db2f7b613855deeada6c57b37ea8e9e1dbb60f3c0312ab4db74696a07062d9a9c5a10eb6f32ba5dfaef3ef5ec65a35c70cf
SSDEEP

1536:t9nFwbSNmCij6z7l+KheSjaFbBNvKpUySy:jq6z7fheBNINSy

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:444

Targets

- Target
  
  41d75595cc2defeabca00134a9d9a83c8b036f9f11e2b9988c77bb43320ed6e7.exe
- Size
  
  101KB
- MD5
  
  b043afcf12cae637031f638c7b7b1194
- SHA1
  
  307ac57eb43562a337ab798c8b72a1c932c2a224
- SHA256
  
  41d75595cc2defeabca00134a9d9a83c8b036f9f11e2b9988c77bb43320ed6e7
- SHA512
  
  a077849bd0acf7bfa75088ba22294db2f7b613855deeada6c57b37ea8e9e1dbb60f3c0312ab4db74696a07062d9a9c5a10eb6f32ba5dfaef3ef5ec65a35c70cf
- SSDEEP
  
  1536:t9nFwbSNmCij6z7l+KheSjaFbBNvKpUySy:jq6z7fheBNINSy
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan