metasploit | f8ce32a1c4bb4fea195dcd4a7693f8b797fe1b87c0a09f7ac170397d343fe265 | Triage

Sharing

General

Target

f8ce32a1c4bb4fea195dcd4a7693f8b797fe1b87c0a09f7ac170397d343fe265.exe
Size

72KB
Sample

241125-aaz6pssqdq
MD5

4154e906e31b18a7efcda54b3215cccd
SHA1

3133d830983f3d8e8796137a23d85a4af96dd840
SHA256

f8ce32a1c4bb4fea195dcd4a7693f8b797fe1b87c0a09f7ac170397d343fe265
SHA512

71e57eb33b43f878f0b771f63c49678e90553d4d9c033b19b4f9d018a3f6ee8aaab7c5e5c4fc07c2acf8d331aae8a51fd3480a3a59dbca6b2f86ddde6269d7db
SSDEEP

1536:I2ScCzNLlhL2Vxr4DnsAbUR46SBZmfPR5Mb+KR0Nc8QsJq3X:IFix4wAwR46e0Nc8QsCX

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.43.104:6666

Targets

- Target
  
  f8ce32a1c4bb4fea195dcd4a7693f8b797fe1b87c0a09f7ac170397d343fe265.exe
- Size
  
  72KB
- MD5
  
  4154e906e31b18a7efcda54b3215cccd
- SHA1
  
  3133d830983f3d8e8796137a23d85a4af96dd840
- SHA256
  
  f8ce32a1c4bb4fea195dcd4a7693f8b797fe1b87c0a09f7ac170397d343fe265
- SHA512
  
  71e57eb33b43f878f0b771f63c49678e90553d4d9c033b19b4f9d018a3f6ee8aaab7c5e5c4fc07c2acf8d331aae8a51fd3480a3a59dbca6b2f86ddde6269d7db
- SSDEEP
  
  1536:I2ScCzNLlhL2Vxr4DnsAbUR46SBZmfPR5Mb+KR0Nc8QsJq3X:IFix4wAwR46e0Nc8QsCX
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan