metasploit | 188611f6c8f3beb3828b832ed8a179793552b8b86142f055251160e74a3b1921 | Triage

Sharing

General

Target

188611f6c8f3beb3828b832ed8a179793552b8b86142f055251160e74a3b1921N.exe
Size

72KB
Sample

241217-ghrymaslez
MD5

ce8c15567e3a0a41a356ab190ed6f740
SHA1

9bce4a7b5d1744d9613c0385ee3eb445f71369aa
SHA256

188611f6c8f3beb3828b832ed8a179793552b8b86142f055251160e74a3b1921
SHA512

e0571eba1a0aa10b49fcc612b25a524cb1378297cc77a8e9d6c1118ec342ae7e813849802a2bef4534be494440e9a6083fb2b6a63f8b33e06c3c97887c80e5a0
SSDEEP

1536:IUV1PMNMDP+XLBfM6hMb+KR0Nc8QsJq39:N1PKxXLBUce0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.106:25687

Targets

- Target
  
  188611f6c8f3beb3828b832ed8a179793552b8b86142f055251160e74a3b1921N.exe
- Size
  
  72KB
- MD5
  
  ce8c15567e3a0a41a356ab190ed6f740
- SHA1
  
  9bce4a7b5d1744d9613c0385ee3eb445f71369aa
- SHA256
  
  188611f6c8f3beb3828b832ed8a179793552b8b86142f055251160e74a3b1921
- SHA512
  
  e0571eba1a0aa10b49fcc612b25a524cb1378297cc77a8e9d6c1118ec342ae7e813849802a2bef4534be494440e9a6083fb2b6a63f8b33e06c3c97887c80e5a0
- SSDEEP
  
  1536:IUV1PMNMDP+XLBfM6hMb+KR0Nc8QsJq39:N1PKxXLBUce0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan