metasploit | 8edbfef8c1787897ddd29db844d442f3da68b1ad5920dcd374b9bf3c230bde01 | Triage

Sharing

General

Target

8edbfef8c1787897ddd29db844d442f3da68b1ad5920dcd374b9bf3c230bde01
Size

10KB
Sample

241201-mgjthszjbv
MD5

55428151957b35dcfe12f57a001a868e
SHA1

7b35ce677355a64ca36771c80f9ff4eb69491b88
SHA256

8edbfef8c1787897ddd29db844d442f3da68b1ad5920dcd374b9bf3c230bde01
SHA512

f6c18a1fba2f52c22817bfa09577ff090092c2bbe6465e5af9d332d1f580ee37a1313dc28db654e66d87f57c1e24f75339810cb039fecbc0b4908977c37a251e
SSDEEP

192:Xw0dI1ot1I8DQ0U7xHRlsWbX0aOp7Sff7E5pz6fMt:XlO78chxHRlsuXBqGf7

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.196.144:10010/5fPq

Attributes

headers User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0

Targets

- Target
  
  8edbfef8c1787897ddd29db844d442f3da68b1ad5920dcd374b9bf3c230bde01
- Size
  
  10KB
- MD5
  
  55428151957b35dcfe12f57a001a868e
- SHA1
  
  7b35ce677355a64ca36771c80f9ff4eb69491b88
- SHA256
  
  8edbfef8c1787897ddd29db844d442f3da68b1ad5920dcd374b9bf3c230bde01
- SHA512
  
  f6c18a1fba2f52c22817bfa09577ff090092c2bbe6465e5af9d332d1f580ee37a1313dc28db654e66d87f57c1e24f75339810cb039fecbc0b4908977c37a251e
- SSDEEP
  
  192:Xw0dI1ot1I8DQ0U7xHRlsWbX0aOp7Sff7E5pz6fMt:XlO78chxHRlsuXBqGf7
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan