metasploit | 8ce2c083caf08af811ddfeead4abd052fb397ee60da9ce7c3accab7d7ec6c399 | Triage

Sharing

General

Target

8ce2c083caf08af811ddfeead4abd052fb397ee60da9ce7c3accab7d7ec6c399N.exe
Size

17KB
Sample

241130-pr9h2atnh1
MD5

aa09cac17f09c6429ada7ee8e9859970
SHA1

09a137f108d18325005425d5a0e1d8165c3d21db
SHA256

8ce2c083caf08af811ddfeead4abd052fb397ee60da9ce7c3accab7d7ec6c399
SHA512

91b18a9cccb8dfa8adae3b0bc7088e4a0fd3380ce066e5dd116ac9cd0960efc6176d2585735fa554efe38f82c310c9140f5e08d556f08d3a9173a37df1c1c85b
SSDEEP

192:S4/aSzCsFv9C3z9JmE9KQnwubZubz7FKo86wooDVFuPB1ovyForcCC4h:SqzCs6j90BAYXYodKD+PEKarcZE

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://123.254.105.223:80/7eIw

Targets

- Target
  
  8ce2c083caf08af811ddfeead4abd052fb397ee60da9ce7c3accab7d7ec6c399N.exe
- Size
  
  17KB
- MD5
  
  aa09cac17f09c6429ada7ee8e9859970
- SHA1
  
  09a137f108d18325005425d5a0e1d8165c3d21db
- SHA256
  
  8ce2c083caf08af811ddfeead4abd052fb397ee60da9ce7c3accab7d7ec6c399
- SHA512
  
  91b18a9cccb8dfa8adae3b0bc7088e4a0fd3380ce066e5dd116ac9cd0960efc6176d2585735fa554efe38f82c310c9140f5e08d556f08d3a9173a37df1c1c85b
- SSDEEP
  
  192:S4/aSzCsFv9C3z9JmE9KQnwubZubz7FKo86wooDVFuPB1ovyForcCC4h:SqzCs6j90BAYXYodKD+PEKarcZE
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan