metasploit | 78df6b1bd10df9a7ce389288b6c2760e493016996a34f14fe96ffbb139188621 | Triage

Sharing

General

Target

2024-12-19_f4102ac9676cf9513b6e973192c44fcb_icedid
Size

6.0MB
Sample

241219-e3zg4ayqfl
MD5

f4102ac9676cf9513b6e973192c44fcb
SHA1

1aecb87b298107a84f64bbd2240d2fba5e030d6b
SHA256

78df6b1bd10df9a7ce389288b6c2760e493016996a34f14fe96ffbb139188621
SHA512

4c58abb391ee3df9d6197433b428b4cf8c3fb4b9bb2d797d81bda72e1565963345390b8109afca9c9bd6dddc5977ee15291a263add790ec62381f267e0983d75
SSDEEP

98304:0pweKekgplcPS441tDElhjcbNlqbSo8dX0GzL:PeKekgpGvuDKGfpLdDzL

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.52.130:4444

Targets

- Target
  
  2024-12-19_f4102ac9676cf9513b6e973192c44fcb_icedid
- Size
  
  6.0MB
- MD5
  
  f4102ac9676cf9513b6e973192c44fcb
- SHA1
  
  1aecb87b298107a84f64bbd2240d2fba5e030d6b
- SHA256
  
  78df6b1bd10df9a7ce389288b6c2760e493016996a34f14fe96ffbb139188621
- SHA512
  
  4c58abb391ee3df9d6197433b428b4cf8c3fb4b9bb2d797d81bda72e1565963345390b8109afca9c9bd6dddc5977ee15291a263add790ec62381f267e0983d75
- SSDEEP
  
  98304:0pweKekgplcPS441tDElhjcbNlqbSo8dX0GzL:PeKekgpGvuDKGfpLdDzL
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan