metasploit | 39e867c09e3bb0a4c27b92cb0a8c0899a07fc96de32e14964b615d06377c32a8 | Triage

Sharing

General

Target

39e867c09e3bb0a4c27b92cb0a8c0899a07fc96de32e14964b615d06377c32a8.exe
Size

144KB
Sample

241202-mpq8ka1lbw
MD5

0709d0b3a25d34041b061e0bc6118ca7
SHA1

9f466e1937d594ccc04047bf470406dab3cc28fa
SHA256

39e867c09e3bb0a4c27b92cb0a8c0899a07fc96de32e14964b615d06377c32a8
SHA512

934d4c0a291788699e678ade5961889229703811911abea0537d0d5896891db5b1ffb6c78c8ad6f7e6ef82dd9f0ea7a7f0b7dd39e39c09ebf6c0c1a2671c56df
SSDEEP

3072:IrnoUZLfzB2CMe0Nc8QsCxXff206RiAM65vp0Oi2Me73w:IrnoUl92CX0Nc8Qs4X320F65RH7A

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.116:4444

Targets

- Target
  
  39e867c09e3bb0a4c27b92cb0a8c0899a07fc96de32e14964b615d06377c32a8.exe
- Size
  
  144KB
- MD5
  
  0709d0b3a25d34041b061e0bc6118ca7
- SHA1
  
  9f466e1937d594ccc04047bf470406dab3cc28fa
- SHA256
  
  39e867c09e3bb0a4c27b92cb0a8c0899a07fc96de32e14964b615d06377c32a8
- SHA512
  
  934d4c0a291788699e678ade5961889229703811911abea0537d0d5896891db5b1ffb6c78c8ad6f7e6ef82dd9f0ea7a7f0b7dd39e39c09ebf6c0c1a2671c56df
- SSDEEP
  
  3072:IrnoUZLfzB2CMe0Nc8QsCxXff206RiAM65vp0Oi2Me73w:IrnoUl92CX0Nc8Qs4X320F65RH7A
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan