metasploit | 1d23519d08c9f32ba9a6a0d929e9b4188dcecca85f27ebfdee28294ab952b85a | Triage

Sharing

General

Target

1d23519d08c9f32ba9a6a0d929e9b4188dcecca85f27ebfdee28294ab952b85a
Size

26KB
Sample

241207-j8mspszlfp
MD5

331fa38a49db4ca9232a75b34e260be2
SHA1

c8866b053ab0c9464d12e9a7e864279e7821cf8e
SHA256

1d23519d08c9f32ba9a6a0d929e9b4188dcecca85f27ebfdee28294ab952b85a
SHA512

d85fe0c3251b681de53957c6333b3b848583fd746c0e8e69d750e5d7191277e6c17aceb566852cea647ea75452ac1e5f4c32a2dffbd1655d561c55aa97563c7a
SSDEEP

384:HFus+LHQmULW2Fb7Rv/I8AUdZTIUc9t1O5s/e4fzodMRW7gJR:HMHQBh7RNZTIUcMcVfqMRz

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.196.144:456

Targets

- Target
  
  1d23519d08c9f32ba9a6a0d929e9b4188dcecca85f27ebfdee28294ab952b85a
- Size
  
  26KB
- MD5
  
  331fa38a49db4ca9232a75b34e260be2
- SHA1
  
  c8866b053ab0c9464d12e9a7e864279e7821cf8e
- SHA256
  
  1d23519d08c9f32ba9a6a0d929e9b4188dcecca85f27ebfdee28294ab952b85a
- SHA512
  
  d85fe0c3251b681de53957c6333b3b848583fd746c0e8e69d750e5d7191277e6c17aceb566852cea647ea75452ac1e5f4c32a2dffbd1655d561c55aa97563c7a
- SSDEEP
  
  384:HFus+LHQmULW2Fb7Rv/I8AUdZTIUc9t1O5s/e4fzodMRW7gJR:HMHQBh7RNZTIUcMcVfqMRz
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan