metasploit

General

Target

a22d2b169ff4f45dc278778642f9e0f20800cf25647aef2f4530c9e5e27903a0.exe
Size

72KB
Sample

241217-hkvyqstrbn
MD5

2a52bd7e2ffbc695c46d747d85c58674
SHA1

85c1bbe98a0650452217a9e2ef521d588c24f1fd
SHA256

a22d2b169ff4f45dc278778642f9e0f20800cf25647aef2f4530c9e5e27903a0
SHA512

1b40f8b50d39070df39596d61dbfd4af9a65c3c1030af2640c6780b2d8444756bd099ff6fd1737b18f758d6e6114259eadab3dab6a77c489409c553b323505fe
SSDEEP

1536:IA+HkP22X85MeGn+mUMRYMb+KR0Nc8QsJq3t:f+y22XaFIYe0Nc8QsCt

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.10.10.10:443/DzRl_3k3SpNefF99OS-OeAKQRquAh1JzLNMOilMCPADHmYYq5qIR6HsyIFN8N_Tj4C7sY9jgI9ptjTVeIcd

Targets

- Target
  
  a22d2b169ff4f45dc278778642f9e0f20800cf25647aef2f4530c9e5e27903a0.exe
- Size
  
  72KB
- MD5
  
  2a52bd7e2ffbc695c46d747d85c58674
- SHA1
  
  85c1bbe98a0650452217a9e2ef521d588c24f1fd
- SHA256
  
  a22d2b169ff4f45dc278778642f9e0f20800cf25647aef2f4530c9e5e27903a0
- SHA512
  
  1b40f8b50d39070df39596d61dbfd4af9a65c3c1030af2640c6780b2d8444756bd099ff6fd1737b18f758d6e6114259eadab3dab6a77c489409c553b323505fe
- SSDEEP
  
  1536:IA+HkP22X85MeGn+mUMRYMb+KR0Nc8QsJq3t:f+y22XaFIYe0Nc8QsCt
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

Metasploit family

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2