metasploit | 228e8ed1c0f72d4c4aad2896e3faaabb85bfc35cc6431adfbbff5421beebdb4c | Triage

Sharing

General

Target

228e8ed1c0f72d4c4aad2896e3faaabb85bfc35cc6431adfbbff5421beebdb4c.exe
Size

72KB
Sample

241222-rsk8ya1pbr
MD5

022451d98d63df7977c47f78bf143ef4
SHA1

75951b804e3da839bebe58fcac2cacbf0cdd76bb
SHA256

228e8ed1c0f72d4c4aad2896e3faaabb85bfc35cc6431adfbbff5421beebdb4c
SHA512

f47f9688f88d569bc7bd9ac67e7b2868c2667c77229ee2b74e3cd9c49dcfe50ba46a3fc004a89370cfb595d130598184f95d54499d52add38a3f16bee2639ec1
SSDEEP

1536:IpcphT82hqH5JPKWnWfz+zg5XMb+KR0Nc8QsJq3/:wKvhqH5Z1nWaWXe0Nc8QsC/

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.20.223.100:5551

Targets

- Target
  
  228e8ed1c0f72d4c4aad2896e3faaabb85bfc35cc6431adfbbff5421beebdb4c.exe
- Size
  
  72KB
- MD5
  
  022451d98d63df7977c47f78bf143ef4
- SHA1
  
  75951b804e3da839bebe58fcac2cacbf0cdd76bb
- SHA256
  
  228e8ed1c0f72d4c4aad2896e3faaabb85bfc35cc6431adfbbff5421beebdb4c
- SHA512
  
  f47f9688f88d569bc7bd9ac67e7b2868c2667c77229ee2b74e3cd9c49dcfe50ba46a3fc004a89370cfb595d130598184f95d54499d52add38a3f16bee2639ec1
- SSDEEP
  
  1536:IpcphT82hqH5JPKWnWfz+zg5XMb+KR0Nc8QsJq3/:wKvhqH5Z1nWaWXe0Nc8QsC/
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan