metasploit

General

Target

0ac3d3b1db89dcab957fefd77ca0be1cc44bccde12d3fa6ea5e6e828662d5297N.exe
Size

72KB
Sample

241217-mh8t2axkdy
MD5

550ea66b1eebb32af27b101893cfdaf0
SHA1

f318276f262ceddc83223a36d18d17f450e7faea
SHA256

0ac3d3b1db89dcab957fefd77ca0be1cc44bccde12d3fa6ea5e6e828662d5297
SHA512

2ba88814522cf48071dc06be6b2ce6cc08914dc9cb98c3659ef42a5b7aac25fc81032ba536377b2ae30976589d05bbbadfc5743e3a8118ba7aa4d1ff043a16cb
SSDEEP

1536:IA+HkP22X85MeGn+mUMRYMb+KR0Nc8QsJq39:f+y22XaFIYe0Nc8QsC9

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.10.10.10:443/DzRl_3k3SpNefF99OS-OeAKQRquAh1JzLNMOilMCPADHmYYq5qIR6HsyIFN8N_Tj4C7sY9jgI9ptjTVeIcd

Targets

- Target
  
  0ac3d3b1db89dcab957fefd77ca0be1cc44bccde12d3fa6ea5e6e828662d5297N.exe
- Size
  
  72KB
- MD5
  
  550ea66b1eebb32af27b101893cfdaf0
- SHA1
  
  f318276f262ceddc83223a36d18d17f450e7faea
- SHA256
  
  0ac3d3b1db89dcab957fefd77ca0be1cc44bccde12d3fa6ea5e6e828662d5297
- SHA512
  
  2ba88814522cf48071dc06be6b2ce6cc08914dc9cb98c3659ef42a5b7aac25fc81032ba536377b2ae30976589d05bbbadfc5743e3a8118ba7aa4d1ff043a16cb
- SSDEEP
  
  1536:IA+HkP22X85MeGn+mUMRYMb+KR0Nc8QsJq39:f+y22XaFIYe0Nc8QsC9
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

Metasploit family

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2