metasploit | a15ba799cff70b6ca65a056217273799a5d8e034aa78acd0a88ba80432e5783d | Triage

Sharing

General

Target

a15ba799cff70b6ca65a056217273799a5d8e034aa78acd0a88ba80432e5783d.exe
Size

72KB
Sample

241128-snjd8axjer
MD5

51ab6313f9ea4ad4ec89b59774ff08b4
SHA1

b6f75069ee0a024c6639f02b2cad968f0e40f35c
SHA256

a15ba799cff70b6ca65a056217273799a5d8e034aa78acd0a88ba80432e5783d
SHA512

f1f24a9043828a9edfd080f0428a1940d590faef041b391dd7ece5fb4acec0e7942b454e59dfeba5df8555a324ffbb6e7e6dba2cc5cd317cbcb0d6f095807c2f
SSDEEP

1536:I30+/fUT2Lds2rVj/JN8n/tyPEzMb+KR0Nc8QsJq3l:YUwsQVj/J2yPKe0Nc8QsCl

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.253.133:443/evil.exe

Targets

- Target
  
  a15ba799cff70b6ca65a056217273799a5d8e034aa78acd0a88ba80432e5783d.exe
- Size
  
  72KB
- MD5
  
  51ab6313f9ea4ad4ec89b59774ff08b4
- SHA1
  
  b6f75069ee0a024c6639f02b2cad968f0e40f35c
- SHA256
  
  a15ba799cff70b6ca65a056217273799a5d8e034aa78acd0a88ba80432e5783d
- SHA512
  
  f1f24a9043828a9edfd080f0428a1940d590faef041b391dd7ece5fb4acec0e7942b454e59dfeba5df8555a324ffbb6e7e6dba2cc5cd317cbcb0d6f095807c2f
- SSDEEP
  
  1536:I30+/fUT2Lds2rVj/JN8n/tyPEzMb+KR0Nc8QsJq3l:YUwsQVj/J2yPKe0Nc8QsCl
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan