metasploit | a5e6f520487916f64d6948151004cb7d9928f8d2d9a2a2832a5c42e787ae74c2 | Triage

Sharing

General

Target

a5e6f520487916f64d6948151004cb7d9928f8d2d9a2a2832a5c42e787ae74c2.exe
Size

8KB
Sample

241120-3d1wmawjay
MD5

3f2514503ea7a3877c3218df6cd0a352
SHA1

a8332f50c36cec4d3eea670d395c2a348798f94c
SHA256

a5e6f520487916f64d6948151004cb7d9928f8d2d9a2a2832a5c42e787ae74c2
SHA512

d6004c4b69163b02312750a7a5cac1a8e108226055834f6613f529b983d5396fb2a4a940b28c91f78968b6e1bc41ff6be77b2130b3c5412ee9f7452072c7bc77
SSDEEP

192:u6UTAHO20dR8uRJfU9WoPXjSzruVQG6v6OmoZ:u6UUHODdRTtkWoPXjSHuVgmoZ

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.187.128:443

Targets

- Target
  
  a5e6f520487916f64d6948151004cb7d9928f8d2d9a2a2832a5c42e787ae74c2.exe
- Size
  
  8KB
- MD5
  
  3f2514503ea7a3877c3218df6cd0a352
- SHA1
  
  a8332f50c36cec4d3eea670d395c2a348798f94c
- SHA256
  
  a5e6f520487916f64d6948151004cb7d9928f8d2d9a2a2832a5c42e787ae74c2
- SHA512
  
  d6004c4b69163b02312750a7a5cac1a8e108226055834f6613f529b983d5396fb2a4a940b28c91f78968b6e1bc41ff6be77b2130b3c5412ee9f7452072c7bc77
- SSDEEP
  
  192:u6UTAHO20dR8uRJfU9WoPXjSzruVQG6v6OmoZ:u6UUHODdRTtkWoPXjSHuVgmoZ
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan