metasploit | a97ef368410d700231c107406e739faef82d574e44ed3fcd8be6ff60da0491a9 | Triage

Sharing

General

Target

a97ef368410d700231c107406e739faef82d574e44ed3fcd8be6ff60da0491a9
Size

4KB
Sample

241203-bd4hzaxqak
MD5

b555bd2d34026b2689af8134f8f40329
SHA1

05df006c6159b4478cc25d7c411271348a74116a
SHA256

a97ef368410d700231c107406e739faef82d574e44ed3fcd8be6ff60da0491a9
SHA512

2cec1089ef7159e2f1c36a90936908486d5f094d531a64412f752e714faf2230243f049906fc95f15dee94e511d9755295ae025c2c42a603e08708455895ac96
SSDEEP

48:6viyP0NSrQ2AeyqPVXoAMtES6mK1Da9J3xfgHL8fBaZvpsZBg:eDwSrQ2Ae/9XoAwj6PY3xMwsZR2+

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp_allports

C2

10.0.0.3:9999

Targets

- Target
  
  a97ef368410d700231c107406e739faef82d574e44ed3fcd8be6ff60da0491a9
- Size
  
  4KB
- MD5
  
  b555bd2d34026b2689af8134f8f40329
- SHA1
  
  05df006c6159b4478cc25d7c411271348a74116a
- SHA256
  
  a97ef368410d700231c107406e739faef82d574e44ed3fcd8be6ff60da0491a9
- SHA512
  
  2cec1089ef7159e2f1c36a90936908486d5f094d531a64412f752e714faf2230243f049906fc95f15dee94e511d9755295ae025c2c42a603e08708455895ac96
- SSDEEP
  
  48:6viyP0NSrQ2AeyqPVXoAMtES6mK1Da9J3xfgHL8fBaZvpsZBg:eDwSrQ2Ae/9XoAwj6PY3xMwsZR2+
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan