metasploit | 790fd1dc8fe82ab8e9ff5be5c32df68fc1d4699f14cae93a29c6c5ca91c9ee10 | Triage

Sharing

General

Target

790fd1dc8fe82ab8e9ff5be5c32df68fc1d4699f14cae93a29c6c5ca91c9ee10
Size

10KB
Sample

241221-mykr5syldm
MD5

acf96a7999f871cdf071af8bb633829d
SHA1

fa8ed63f8a7c468592f09bc4bd417148481ccbc9
SHA256

790fd1dc8fe82ab8e9ff5be5c32df68fc1d4699f14cae93a29c6c5ca91c9ee10
SHA512

3d4160c15ad684f098c7310acd5ecc79677f6eee8b157cd89d75b9a6da18f9f493772dd65941e31efe7bddee410f4fb8aa0c6d64ee1dfe53c63b20c622b4a770
SSDEEP

192:FmmPvmMj/zkgWJrzjOUsj7DT2Bu5pz6fM5t:FmMvJ/GJrzjE76Be

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://10.0.0.9:1234/jC6y

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Targets

- Target
  
  790fd1dc8fe82ab8e9ff5be5c32df68fc1d4699f14cae93a29c6c5ca91c9ee10
- Size
  
  10KB
- MD5
  
  acf96a7999f871cdf071af8bb633829d
- SHA1
  
  fa8ed63f8a7c468592f09bc4bd417148481ccbc9
- SHA256
  
  790fd1dc8fe82ab8e9ff5be5c32df68fc1d4699f14cae93a29c6c5ca91c9ee10
- SHA512
  
  3d4160c15ad684f098c7310acd5ecc79677f6eee8b157cd89d75b9a6da18f9f493772dd65941e31efe7bddee410f4fb8aa0c6d64ee1dfe53c63b20c622b4a770
- SSDEEP
  
  192:FmmPvmMj/zkgWJrzjOUsj7DT2Bu5pz6fM5t:FmMvJ/GJrzjE76Be
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan