metasploit

General

Target

dad264d25243ec06a5d6d8e8fff22d45467dbb1a5dacd1694d0c169f98f10cbbN.exe
Size

72KB
Sample

241219-28ndcaspfs
MD5

ec23a9873725c9a33cb0e662507f4540
SHA1

8a9057ebf0fd646431018c7d12d5b3b627793868
SHA256

dad264d25243ec06a5d6d8e8fff22d45467dbb1a5dacd1694d0c169f98f10cbb
SHA512

8d10b95002a7b437ab9842545fe2b9404f6f5ed76f1896f8e63bbd44e5ae00dd3fec8175935d2c7426128cc74d64bfb27cc1a0b587e6c6c81d8240cbf062066c
SSDEEP

1536:I7Dxd6ht4Jpp5LfACSGrD5LMb+KR0Nc8QsJq39:QdVACjrDhe0Nc8QsC9

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.32.128:808/Vpemds_Xe9qQeJF59xpYigJOv07BgTNFljQSyudu66F_E7IjKJspN-jX6zocZPfSRB0sfngGrZECNqfL_YqV4iV_YCVvbADSimcyxxPW14Mg_-BbUwKKqpe9kw9ZhAVQtrLEJMMJcfBBtimcSTOHM9-aXag9_KiobE4K-V7gCh0fA1drx86_lMA-10my3e9Zn6N7SKWIukV

Targets

- Target
  
  dad264d25243ec06a5d6d8e8fff22d45467dbb1a5dacd1694d0c169f98f10cbbN.exe
- Size
  
  72KB
- MD5
  
  ec23a9873725c9a33cb0e662507f4540
- SHA1
  
  8a9057ebf0fd646431018c7d12d5b3b627793868
- SHA256
  
  dad264d25243ec06a5d6d8e8fff22d45467dbb1a5dacd1694d0c169f98f10cbb
- SHA512
  
  8d10b95002a7b437ab9842545fe2b9404f6f5ed76f1896f8e63bbd44e5ae00dd3fec8175935d2c7426128cc74d64bfb27cc1a0b587e6c6c81d8240cbf062066c
- SSDEEP
  
  1536:I7Dxd6ht4Jpp5LfACSGrD5LMb+KR0Nc8QsJq39:QdVACjrDhe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

Metasploit family

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2