metasploit

General

Target

356934f9e5aea961dd35e182aa8c292101bb930e9d4cdf894d25f081d2ccea88N.exe
Size

72KB
Sample

241210-s9blhatrhm
MD5

c4e74792f0529590394211ac0bb63480
SHA1

88cf8bb6e3ba6aede422a879afac0bde7e63fa1d
SHA256

356934f9e5aea961dd35e182aa8c292101bb930e9d4cdf894d25f081d2ccea88
SHA512

d88791974bc670c9d4e169fbd56f956c566a8afd60617dc8940971a2f06cba065c4b5c6f220c95ea6bc91c3e5ba365f96e8d74bd934118fe273a31983b9f4d0e
SSDEEP

1536:IMcP8KyKwsw3mOsDWeNQ+cm2DMb+KR0Nc8QsJq39:RB8wbWHDDW+cbDe0Nc8QsC9

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.10.10.10:443/f0sxg4Hb5uSmsqezweKsEQxdDLUIRcbh_9hjXKascf1GRS980y4MzMejfQ6IrPWOCJhnLjcfVKm7JDWlkbjTdK3fGFPi4p37164Z3K28XaGuNJWz9wkfw1TyV--4Z98aMJpLlwx1Zbc2jECtbx51qcjeFsgfODZknNPVyAJMRCeX4D4s9UYokS5-ZZI977KQ9P

Targets

- Target
  
  356934f9e5aea961dd35e182aa8c292101bb930e9d4cdf894d25f081d2ccea88N.exe
- Size
  
  72KB
- MD5
  
  c4e74792f0529590394211ac0bb63480
- SHA1
  
  88cf8bb6e3ba6aede422a879afac0bde7e63fa1d
- SHA256
  
  356934f9e5aea961dd35e182aa8c292101bb930e9d4cdf894d25f081d2ccea88
- SHA512
  
  d88791974bc670c9d4e169fbd56f956c566a8afd60617dc8940971a2f06cba065c4b5c6f220c95ea6bc91c3e5ba365f96e8d74bd934118fe273a31983b9f4d0e
- SSDEEP
  
  1536:IMcP8KyKwsw3mOsDWeNQ+cm2DMb+KR0Nc8QsJq39:RB8wbWHDDW+cbDe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

Metasploit family

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2