metasploit | 7fd934bf845b4bc0e37eb2c38a85045d332aee79d83e018eb0ad648802785ad1 | Triage

Sharing

General

Target

7fd934bf845b4bc0e37eb2c38a85045d332aee79d83e018eb0ad648802785ad1
Size

11KB
Sample

241206-sk3npayrep
MD5

75ddb1c02a42010172e5e5ab02d4f95c
SHA1

64f0c18bdbc2c45aee9953917f4d5da569d865a4
SHA256

7fd934bf845b4bc0e37eb2c38a85045d332aee79d83e018eb0ad648802785ad1
SHA512

df786996014b33fe7cf6c57cb1b47aa2ed45c5d1e2d41e56c12825703d6720b3a7241c5632d1d9e43238cf514ff10d061589b6296fedbf1eaa8b98e16aa1c6d7
SSDEEP

192:0Dj2HT5rp8gI8ss1bSrVEW13/TzcsX1L/7Ca87E5pz6fM0W:0faNq85SrVEQ/PcUq7l

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.196.144:456

Targets

- Target
  
  7fd934bf845b4bc0e37eb2c38a85045d332aee79d83e018eb0ad648802785ad1
- Size
  
  11KB
- MD5
  
  75ddb1c02a42010172e5e5ab02d4f95c
- SHA1
  
  64f0c18bdbc2c45aee9953917f4d5da569d865a4
- SHA256
  
  7fd934bf845b4bc0e37eb2c38a85045d332aee79d83e018eb0ad648802785ad1
- SHA512
  
  df786996014b33fe7cf6c57cb1b47aa2ed45c5d1e2d41e56c12825703d6720b3a7241c5632d1d9e43238cf514ff10d061589b6296fedbf1eaa8b98e16aa1c6d7
- SSDEEP
  
  192:0Dj2HT5rp8gI8ss1bSrVEW13/TzcsX1L/7Ca87E5pz6fM0W:0faNq85SrVEQ/PcUq7l
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan