metasploit | 1d4f27ea1bdf9ab533fbe450297d218246109d657cb5a3a5f62ae65ce6413b29 | Triage

Sharing

General

Target

1d4f27ea1bdf9ab533fbe450297d218246109d657cb5a3a5f62ae65ce6413b29.exe
Size

72KB
Sample

241219-ktkv8sxrer
MD5

0249cce8c47ef7fc7955f6d457354417
SHA1

fc9c9ca587a8bf9c061b81d72d5454ee5d3a03ec
SHA256

1d4f27ea1bdf9ab533fbe450297d218246109d657cb5a3a5f62ae65ce6413b29
SHA512

4bc32bec26cbd56ab0d08371d3f84fd34edca478954ae703fc642d51c72dd77bf7ac7ca352f95d8febb9f39b2ec58c2e53e1b8b577ac18bfc390111178b604e0
SSDEEP

1536:Iyg63UO8YEe6av68p3kPeywfsVXnMb+KR0Nc8QsJq3F:RgWUO8YEe6avHmBwfsxne0Nc8QsCF

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.100.148:8888

Targets

- Target
  
  1d4f27ea1bdf9ab533fbe450297d218246109d657cb5a3a5f62ae65ce6413b29.exe
- Size
  
  72KB
- MD5
  
  0249cce8c47ef7fc7955f6d457354417
- SHA1
  
  fc9c9ca587a8bf9c061b81d72d5454ee5d3a03ec
- SHA256
  
  1d4f27ea1bdf9ab533fbe450297d218246109d657cb5a3a5f62ae65ce6413b29
- SHA512
  
  4bc32bec26cbd56ab0d08371d3f84fd34edca478954ae703fc642d51c72dd77bf7ac7ca352f95d8febb9f39b2ec58c2e53e1b8b577ac18bfc390111178b604e0
- SSDEEP
  
  1536:Iyg63UO8YEe6av68p3kPeywfsVXnMb+KR0Nc8QsJq3F:RgWUO8YEe6avHmBwfsxne0Nc8QsCF
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan