metasploit | eef5e42651730017e07fd3903c68fee1f88e794cc9588b0f0140770d628364e0 | Triage

Sharing

General

Target

eef5e42651730017e07fd3903c68fee1f88e794cc9588b0f0140770d628364e0
Size

72KB
Sample

241202-ek6tfsymd1
MD5

ea370d74c9f07e6b814bd450e3a32294
SHA1

d6d943dd511b5ea55c22f2acb9f245149f404d8f
SHA256

eef5e42651730017e07fd3903c68fee1f88e794cc9588b0f0140770d628364e0
SHA512

2d1c9c42f3686b8b9b2e95f6feb150f7f95d352df1bf2f964431731d67e39bcdd08900423e520ac96051234f30a63625c9c1a9f6edc7cfa24d546a8041b5db60
SSDEEP

1536:Iku2/8rpvB0vmh4VgrV1/ICMb+KR0Nc8QsJq39:PdErZB5eVgrV5Xe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Targets

- Target
  
  eef5e42651730017e07fd3903c68fee1f88e794cc9588b0f0140770d628364e0
- Size
  
  72KB
- MD5
  
  ea370d74c9f07e6b814bd450e3a32294
- SHA1
  
  d6d943dd511b5ea55c22f2acb9f245149f404d8f
- SHA256
  
  eef5e42651730017e07fd3903c68fee1f88e794cc9588b0f0140770d628364e0
- SHA512
  
  2d1c9c42f3686b8b9b2e95f6feb150f7f95d352df1bf2f964431731d67e39bcdd08900423e520ac96051234f30a63625c9c1a9f6edc7cfa24d546a8041b5db60
- SSDEEP
  
  1536:Iku2/8rpvB0vmh4VgrV1/ICMb+KR0Nc8QsJq39:PdErZB5eVgrV5Xe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan