metasploit | 32f02970c96d67299fe38914eeb727d8f51f5fb5ce6778cf9cee0f94387634c4 | Triage

Sharing

General

Target

32f02970c96d67299fe38914eeb727d8f51f5fb5ce6778cf9cee0f94387634c4.exe
Size

72KB
Sample

241127-wlbhdazpcl
MD5

08299766eaa237684f83abadcb2e1319
SHA1

cccd0bb8312465feb137da6bd4fd74c6bf12df15
SHA256

32f02970c96d67299fe38914eeb727d8f51f5fb5ce6778cf9cee0f94387634c4
SHA512

0d8e697b8a95692cdfe3ac64f149610f7d6c747d556da5cf2f43da515c81a720ada009e93c35d7972808861d00bebebb6ff92f467529f95033d916c0963c3122
SSDEEP

1536:ItFaS2FBPFLZPVzHOXxBc/QBxk9Mb+KR0Nc8QsJq3H:sMZx9PcBoQBxIe0Nc8QsCH

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.47.125:4444

Targets

- Target
  
  32f02970c96d67299fe38914eeb727d8f51f5fb5ce6778cf9cee0f94387634c4.exe
- Size
  
  72KB
- MD5
  
  08299766eaa237684f83abadcb2e1319
- SHA1
  
  cccd0bb8312465feb137da6bd4fd74c6bf12df15
- SHA256
  
  32f02970c96d67299fe38914eeb727d8f51f5fb5ce6778cf9cee0f94387634c4
- SHA512
  
  0d8e697b8a95692cdfe3ac64f149610f7d6c747d556da5cf2f43da515c81a720ada009e93c35d7972808861d00bebebb6ff92f467529f95033d916c0963c3122
- SSDEEP
  
  1536:ItFaS2FBPFLZPVzHOXxBc/QBxk9Mb+KR0Nc8QsJq3H:sMZx9PcBoQBxIe0Nc8QsCH
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan