metasploit | 6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200c | Triage

Sharing

General

Target

6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200cN.exe
Size

12KB
Sample

241129-vyr58axpcz
MD5

dddc1463294fbfe21770970806653070
SHA1

1a3198adfc9d131bf72026240cb1821283b8aa81
SHA256

6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200c
SHA512

07ba23da7bfa1865e8346ef7d7db3ce8ed2b2d05817ba50d7c58a8de49571eb0b9ecff48a0525eb85dd308b75fe4def0ef7b5250f769c6b8ad7ad930223965a5
SSDEEP

192:TYEomy7Aj/1y4KNNONK7ea/iMnJgnsITSwy6fIEmB2UvmvjwUE:T1jZy4K246a/nnJKsOSv6fIEUbvmvj

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.201.128:6688

Targets

- Target
  
  6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200cN.exe
- Size
  
  12KB
- MD5
  
  dddc1463294fbfe21770970806653070
- SHA1
  
  1a3198adfc9d131bf72026240cb1821283b8aa81
- SHA256
  
  6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200c
- SHA512
  
  07ba23da7bfa1865e8346ef7d7db3ce8ed2b2d05817ba50d7c58a8de49571eb0b9ecff48a0525eb85dd308b75fe4def0ef7b5250f769c6b8ad7ad930223965a5
- SSDEEP
  
  192:TYEomy7Aj/1y4KNNONK7ea/iMnJgnsITSwy6fIEmB2UvmvjwUE:T1jZy4K246a/nnJKsOSv6fIEUbvmvj
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan