metasploit | 3b4791d55eb9f24ee04d1ba4ebf2fccc6cee36bd2ab6f4f94df933364f582f2a | Triage

Sharing

General

Target

3b4791d55eb9f24ee04d1ba4ebf2fccc6cee36bd2ab6f4f94df933364f582f2a
Size

72KB
Sample

241122-1ex51swkdr
MD5

7cd195f39d7d29ba0440bcd0243e8297
SHA1

b97eb9c95217a21b95f892eb6ba8cc1f4b725ab3
SHA256

3b4791d55eb9f24ee04d1ba4ebf2fccc6cee36bd2ab6f4f94df933364f582f2a
SHA512

6912b0ac18bb8a71da1c10e9bdb70ba0d0be01f8075bc40a4cd02bfccf428037d4ded486e02103b79d04f524d7eb657069b25862da21d11fa73f8d8c72e669a9
SSDEEP

1536:IJyxwkKAcavqYvDDoyxTKM1Mb+KR0Nc8QsJq39:/wA3QYe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.75.149:4444

Targets

- Target
  
  3b4791d55eb9f24ee04d1ba4ebf2fccc6cee36bd2ab6f4f94df933364f582f2a
- Size
  
  72KB
- MD5
  
  7cd195f39d7d29ba0440bcd0243e8297
- SHA1
  
  b97eb9c95217a21b95f892eb6ba8cc1f4b725ab3
- SHA256
  
  3b4791d55eb9f24ee04d1ba4ebf2fccc6cee36bd2ab6f4f94df933364f582f2a
- SHA512
  
  6912b0ac18bb8a71da1c10e9bdb70ba0d0be01f8075bc40a4cd02bfccf428037d4ded486e02103b79d04f524d7eb657069b25862da21d11fa73f8d8c72e669a9
- SSDEEP
  
  1536:IJyxwkKAcavqYvDDoyxTKM1Mb+KR0Nc8QsJq39:/wA3QYe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan