metasploit | ed448a242c66c6f547cab3c480129c17b17b9208642ccd82e4f5d0b51e5f6e67 | Triage

Sharing

General

Target

ed448a242c66c6f547cab3c480129c17b17b9208642ccd82e4f5d0b51e5f6e67
Size

23KB
Sample

241207-j4shdstnf1
MD5

91febce2e719925ecc48b2a406655fbd
SHA1

42b1599ff17e3ddae03553ea7710433f6807b773
SHA256

ed448a242c66c6f547cab3c480129c17b17b9208642ccd82e4f5d0b51e5f6e67
SHA512

a9dc84b5a9a444a9c9b456293c83d07a98769c8bda8050b8acb93ceff1a7dc85a1ae19bf23a0e3629dae4bae92e4e8c8561b300d69c3a248d745399250634a25
SSDEEP

384:Vq+ci0Q8ELW2Fb7Rp/o8AEpldYdsxvBg7gJR:Oi0Qfh7RKsxvBp

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.196.144:456

Targets

- Target
  
  ed448a242c66c6f547cab3c480129c17b17b9208642ccd82e4f5d0b51e5f6e67
- Size
  
  23KB
- MD5
  
  91febce2e719925ecc48b2a406655fbd
- SHA1
  
  42b1599ff17e3ddae03553ea7710433f6807b773
- SHA256
  
  ed448a242c66c6f547cab3c480129c17b17b9208642ccd82e4f5d0b51e5f6e67
- SHA512
  
  a9dc84b5a9a444a9c9b456293c83d07a98769c8bda8050b8acb93ceff1a7dc85a1ae19bf23a0e3629dae4bae92e4e8c8561b300d69c3a248d745399250634a25
- SSDEEP
  
  384:Vq+ci0Q8ELW2Fb7Rp/o8AEpldYdsxvBg7gJR:Oi0Qfh7RKsxvBp
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan