metasploit

General

Target

f617108189ce11bf19b2fa2eeb55761f7071625860b89df98cfaf7598f26b196N.exe
Size

72KB
Sample

241220-c4yabaxpdl
MD5

aa29ec6aef52cdc7fca5485f07ff7be0
SHA1

b6da7a0111b639edde6a023ca1ce7c77e20e85bc
SHA256

f617108189ce11bf19b2fa2eeb55761f7071625860b89df98cfaf7598f26b196
SHA512

f7a13ca424a91996ba9de8fed947e9a7f634387de74b64eafef2c48891c568aec796ac921c2094a03010f7df30aed50792c0d109e140f6669f7097fe5ee370f4
SSDEEP

1536:IOuISp0ftVCr1z41c3hOcCCLGZbmzMb+KR0Nc8QsJq31:GIe0fzCr141cROvFAe0Nc8QsC1

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.10.10.10:443/InfGUBRUnnIeKh8reX_eYQh4F1x1rysHuaV6wCjHx

Targets

- Target
  
  f617108189ce11bf19b2fa2eeb55761f7071625860b89df98cfaf7598f26b196N.exe
- Size
  
  72KB
- MD5
  
  aa29ec6aef52cdc7fca5485f07ff7be0
- SHA1
  
  b6da7a0111b639edde6a023ca1ce7c77e20e85bc
- SHA256
  
  f617108189ce11bf19b2fa2eeb55761f7071625860b89df98cfaf7598f26b196
- SHA512
  
  f7a13ca424a91996ba9de8fed947e9a7f634387de74b64eafef2c48891c568aec796ac921c2094a03010f7df30aed50792c0d109e140f6669f7097fe5ee370f4
- SSDEEP
  
  1536:IOuISp0ftVCr1z41c3hOcCCLGZbmzMb+KR0Nc8QsJq31:GIe0fzCr141cROvFAe0Nc8QsC1
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

Metasploit family

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2