metasploit | cea688db96a991f2bf2c3145f710fe2ea5955650b2ecc03dd53f20069b9b34ed | Triage

Sharing

General

Target

cea688db96a991f2bf2c3145f710fe2ea5955650b2ecc03dd53f20069b9b34edN.exe
Size

72KB
Sample

241130-j4abtatkfn
MD5

ad724ed8877c226ab54808d1270f5b60
SHA1

3f99430ebda108886a15cd422d2d696d9f08333c
SHA256

cea688db96a991f2bf2c3145f710fe2ea5955650b2ecc03dd53f20069b9b34ed
SHA512

f34440fc960ca44980bf78cd203ecfb8921a9b69c25e65e49abbc6e09537d587dd5a05877351ffc1f4d652b4c5da00c502a8badf67a88f7feae2a347f334b8b3
SSDEEP

1536:ILJz2uiHus8/GYwDDx43TxFzi8Fz+Mb+KR0Nc8QsJq39:QSRgwDV437zi88e0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.119.128:4222

Targets

- Target
  
  cea688db96a991f2bf2c3145f710fe2ea5955650b2ecc03dd53f20069b9b34edN.exe
- Size
  
  72KB
- MD5
  
  ad724ed8877c226ab54808d1270f5b60
- SHA1
  
  3f99430ebda108886a15cd422d2d696d9f08333c
- SHA256
  
  cea688db96a991f2bf2c3145f710fe2ea5955650b2ecc03dd53f20069b9b34ed
- SHA512
  
  f34440fc960ca44980bf78cd203ecfb8921a9b69c25e65e49abbc6e09537d587dd5a05877351ffc1f4d652b4c5da00c502a8badf67a88f7feae2a347f334b8b3
- SSDEEP
  
  1536:ILJz2uiHus8/GYwDDx43TxFzi8Fz+Mb+KR0Nc8QsJq39:QSRgwDV437zi88e0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan