metasploit | 6d8112f6fb3b7137b5ec3151d7f76c52470d54fded95dfc3a37fa621b8b8e9e2 | Triage

Sharing

General

Target

6d8112f6fb3b7137b5ec3151d7f76c52470d54fded95dfc3a37fa621b8b8e9e2.exe
Size

72KB
Sample

241124-1tbwbsxnbp
MD5

69661b2c08bd0f8b6934712518daf7bb
SHA1

3154398453a8f51665ca72fffb3402d76f0dfc02
SHA256

6d8112f6fb3b7137b5ec3151d7f76c52470d54fded95dfc3a37fa621b8b8e9e2
SHA512

23c16e064b5c5d6b3c22ab39a265f9c0d251ea54438d4b07c72249864d25215edf1e00c1a8484cfc14cd1380f8a9c884b12f36edb527534fba3d7a8c4ebb96be
SSDEEP

1536:IA++tJJmwo7EiROyKUTBmzNlCU63UYIp5Mb+KR0Nc8QsJq3f:jztrmwKOyK8BIlC93bge0Nc8QsCf

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.153.1:4444

Targets

- Target
  
  6d8112f6fb3b7137b5ec3151d7f76c52470d54fded95dfc3a37fa621b8b8e9e2.exe
- Size
  
  72KB
- MD5
  
  69661b2c08bd0f8b6934712518daf7bb
- SHA1
  
  3154398453a8f51665ca72fffb3402d76f0dfc02
- SHA256
  
  6d8112f6fb3b7137b5ec3151d7f76c52470d54fded95dfc3a37fa621b8b8e9e2
- SHA512
  
  23c16e064b5c5d6b3c22ab39a265f9c0d251ea54438d4b07c72249864d25215edf1e00c1a8484cfc14cd1380f8a9c884b12f36edb527534fba3d7a8c4ebb96be
- SSDEEP
  
  1536:IA++tJJmwo7EiROyKUTBmzNlCU63UYIp5Mb+KR0Nc8QsJq3f:jztrmwKOyK8BIlC93bge0Nc8QsCf
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan