metasploit

General

Target

856f2ef1aae85a851e3f10af61f7e7fafabc1fea924873849d3c547044534c91N.exe
Size

72KB
Sample

241129-gfbtmatrgn
MD5

05cc2cf3ec80a6f1dbe09bb6e7ea84e0
SHA1

79eed0b11f5437386b11a5300165616a94f00da6
SHA256

856f2ef1aae85a851e3f10af61f7e7fafabc1fea924873849d3c547044534c91
SHA512

5b23b4e7d03469f8488e2634e3dba1411d917450cd3dd8c032237bf1e2e13453050a7052a78338acc86238ff8599efeb31a5c6f85a55d28b46b343e06776f9ba
SSDEEP

1536:I+I54xDplFjL68r5lF8sS4sHqVMb+KR0Nc8QsJq39:rI5sDpl9LhB8sSuVe0Nc8QsC9

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.23:5959

Targets

- Target
  
  856f2ef1aae85a851e3f10af61f7e7fafabc1fea924873849d3c547044534c91N.exe
- Size
  
  72KB
- MD5
  
  05cc2cf3ec80a6f1dbe09bb6e7ea84e0
- SHA1
  
  79eed0b11f5437386b11a5300165616a94f00da6
- SHA256
  
  856f2ef1aae85a851e3f10af61f7e7fafabc1fea924873849d3c547044534c91
- SHA512
  
  5b23b4e7d03469f8488e2634e3dba1411d917450cd3dd8c032237bf1e2e13453050a7052a78338acc86238ff8599efeb31a5c6f85a55d28b46b343e06776f9ba
- SSDEEP
  
  1536:I+I54xDplFjL68r5lF8sS4sHqVMb+KR0Nc8QsJq39:rI5sDpl9LhB8sSuVe0Nc8QsC9
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Extracted

Targets

Metasploit family

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2