metasploit | 9e7eedcd834f9ae2ad1c8ea7cd0ee1091a74a4eeb923909b5b55493e486386af | Triage

Sharing

General

Target

9e7eedcd834f9ae2ad1c8ea7cd0ee1091a74a4eeb923909b5b55493e486386af.exe
Size

72KB
Sample

241126-xsd3hsvlgw
MD5

a085a2e13d4376e05849148e846bceac
SHA1

8385d260236d8f8df86f6c7b7b5b5acc7ccc70ee
SHA256

9e7eedcd834f9ae2ad1c8ea7cd0ee1091a74a4eeb923909b5b55493e486386af
SHA512

9838febc08dc239986d4c8f35b311380f52f78906248daebbd501b17c86832b33f990db1b5b253d2cf90b909a6ef709af55cc7ea19c409a7ed33e04325c38e14
SSDEEP

1536:IjVM3SciFsCw3tkaRZvrAssWnx70S6ABMb+KR0Nc8QsJq3X:2OrqsJ3tkaRZvhX6ABe0Nc8QsCX

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:4444

Targets

- Target
  
  9e7eedcd834f9ae2ad1c8ea7cd0ee1091a74a4eeb923909b5b55493e486386af.exe
- Size
  
  72KB
- MD5
  
  a085a2e13d4376e05849148e846bceac
- SHA1
  
  8385d260236d8f8df86f6c7b7b5b5acc7ccc70ee
- SHA256
  
  9e7eedcd834f9ae2ad1c8ea7cd0ee1091a74a4eeb923909b5b55493e486386af
- SHA512
  
  9838febc08dc239986d4c8f35b311380f52f78906248daebbd501b17c86832b33f990db1b5b253d2cf90b909a6ef709af55cc7ea19c409a7ed33e04325c38e14
- SSDEEP
  
  1536:IjVM3SciFsCw3tkaRZvrAssWnx70S6ABMb+KR0Nc8QsJq3X:2OrqsJ3tkaRZvhX6ABe0Nc8QsCX
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan