metasploit | 7f443c02fe8959435d195520946f26abc09babebc9115059478e46454bb6239a | Triage

Sharing

General

Target

7f443c02fe8959435d195520946f26abc09babebc9115059478e46454bb6239a
Size

72KB
Sample

241209-at32pswqaw
MD5

babaf56bb3d7d9ced496da4cbae1c324
SHA1

e8f74a988c3c8a95ea79ff851a6f49f7fae53a84
SHA256

7f443c02fe8959435d195520946f26abc09babebc9115059478e46454bb6239a
SHA512

f30b8c7703d065c5d0239f505e57c6280eadd075e27e91e5e40f5006b2728baa1114a3548ec7c9a9adc434767cdd9a0e7eab173057cfb003f52eb961a5a61bdb
SSDEEP

1536:IXDQfsHTfdjbBVfM0dENHYQbeMb+KR0Nc8QsJq39:kZnjVEljye0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.121.128:5555

Targets

- Target
  
  7f443c02fe8959435d195520946f26abc09babebc9115059478e46454bb6239a
- Size
  
  72KB
- MD5
  
  babaf56bb3d7d9ced496da4cbae1c324
- SHA1
  
  e8f74a988c3c8a95ea79ff851a6f49f7fae53a84
- SHA256
  
  7f443c02fe8959435d195520946f26abc09babebc9115059478e46454bb6239a
- SHA512
  
  f30b8c7703d065c5d0239f505e57c6280eadd075e27e91e5e40f5006b2728baa1114a3548ec7c9a9adc434767cdd9a0e7eab173057cfb003f52eb961a5a61bdb
- SSDEEP
  
  1536:IXDQfsHTfdjbBVfM0dENHYQbeMb+KR0Nc8QsJq39:kZnjVEljye0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan