metasploit | ead55926421a3dd85015f4b2a5fd533a06322cc7cbfc907a3653f2f073849b58 | Triage

Sharing

General

Target

ead55926421a3dd85015f4b2a5fd533a06322cc7cbfc907a3653f2f073849b58.exe
Size

72KB
Sample

241214-rg2rjswmfm
MD5

838be6b50f90ec703b0fa5107f417576
SHA1

ce4cb87dc8a87f2553219ef47d8cc3a04430871b
SHA256

ead55926421a3dd85015f4b2a5fd533a06322cc7cbfc907a3653f2f073849b58
SHA512

ebb26bd7ffc4b2e3ba905fc2974d5b7ced171085860793095af7ae1e8d04837a0678dfc34d564c03eed305317cabd9374612b9daccfa7cec685d992221ddcd38
SSDEEP

1536:I3ISVsqiuaykAnTS0WiT8t/2lQMb+KR0Nc8QsJq39:3qii7WiTTlQe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

209.141.35.225:445

Targets

- Target
  
  ead55926421a3dd85015f4b2a5fd533a06322cc7cbfc907a3653f2f073849b58.exe
- Size
  
  72KB
- MD5
  
  838be6b50f90ec703b0fa5107f417576
- SHA1
  
  ce4cb87dc8a87f2553219ef47d8cc3a04430871b
- SHA256
  
  ead55926421a3dd85015f4b2a5fd533a06322cc7cbfc907a3653f2f073849b58
- SHA512
  
  ebb26bd7ffc4b2e3ba905fc2974d5b7ced171085860793095af7ae1e8d04837a0678dfc34d564c03eed305317cabd9374612b9daccfa7cec685d992221ddcd38
- SSDEEP
  
  1536:I3ISVsqiuaykAnTS0WiT8t/2lQMb+KR0Nc8QsJq39:3qii7WiTTlQe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan