metasploit | 4f5906006635397071db391d4215938187d9e794ed851ee0fecc0c8bd730cbd2 | Triage

Sharing

General

Target

4f5906006635397071db391d4215938187d9e794ed851ee0fecc0c8bd730cbd2
Size

72KB
Sample

241217-2bhfts1qcj
MD5

97cf1ed37533bb4cfd27d1071bb20962
SHA1

5a0663159d4c300b31036fb4f9d9b5de215d7c1e
SHA256

4f5906006635397071db391d4215938187d9e794ed851ee0fecc0c8bd730cbd2
SHA512

0d527c2cef9120d4fa84a0102d2ebd2c4c6ac43f4c2a13ab30d9835e7d87694169cf0d0f906d9786537680cdb4f24279a92f106a2510074b7bc3b7b8aa5612a4
SSDEEP

1536:Ip9AFQwmb4cnx6tRAo1RipIXeGIMb+KR0Nc8QsJq39:ifwmcXtRAo1RMIXvIe0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_bind_tcp

Targets

- Target
  
  4f5906006635397071db391d4215938187d9e794ed851ee0fecc0c8bd730cbd2
- Size
  
  72KB
- MD5
  
  97cf1ed37533bb4cfd27d1071bb20962
- SHA1
  
  5a0663159d4c300b31036fb4f9d9b5de215d7c1e
- SHA256
  
  4f5906006635397071db391d4215938187d9e794ed851ee0fecc0c8bd730cbd2
- SHA512
  
  0d527c2cef9120d4fa84a0102d2ebd2c4c6ac43f4c2a13ab30d9835e7d87694169cf0d0f906d9786537680cdb4f24279a92f106a2510074b7bc3b7b8aa5612a4
- SSDEEP
  
  1536:Ip9AFQwmb4cnx6tRAo1RipIXeGIMb+KR0Nc8QsJq39:ifwmcXtRAo1RMIXvIe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan