metasploit | 22be873796b37d67aea78c729dfa59569fb684ad0511784d0d558cc9e6868deb | Triage

Sharing

General

Target

flvupdate.exe
Size

72KB
Sample

241215-d6j15svkfn
MD5

81d9cbbf4af3473f064d5796213d2f6f
SHA1

f04b18e025e9b4ba8e6a7a2ec88888b790ae0930
SHA256

22be873796b37d67aea78c729dfa59569fb684ad0511784d0d558cc9e6868deb
SHA512

5b84ab70c1f8246fc5d3548e52facf4cc252cb43918dad24a601a504df5126699ec4703d491ee36d874b6f200f484801f2b49f69d32dc2d3a816989155731875
SSDEEP

1536:IU1Uz5KKnRZ5EX2dQq+rQuA6fGMdMb+KR0Nc8QsJq39:w/+41+rQuvdde0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://miscsecure.com:443/_FzPp3k6J1r5ovijnp85tg-QV6IapBC

Targets

- Target
  
  flvupdate.exe
- Size
  
  72KB
- MD5
  
  81d9cbbf4af3473f064d5796213d2f6f
- SHA1
  
  f04b18e025e9b4ba8e6a7a2ec88888b790ae0930
- SHA256
  
  22be873796b37d67aea78c729dfa59569fb684ad0511784d0d558cc9e6868deb
- SHA512
  
  5b84ab70c1f8246fc5d3548e52facf4cc252cb43918dad24a601a504df5126699ec4703d491ee36d874b6f200f484801f2b49f69d32dc2d3a816989155731875
- SSDEEP
  
  1536:IU1Uz5KKnRZ5EX2dQq+rQuA6fGMdMb+KR0Nc8QsJq39:w/+41+rQuvdde0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan