metasploit | 0bb1322813af63fc1a50b68e394f00e0e9a2860a811fed53b52fb432bb77ffd0 | Triage

Sharing

General

Target

0bb1322813af63fc1a50b68e394f00e0e9a2860a811fed53b52fb432bb77ffd0
Size

57KB
Sample

241224-m4gbxawldm
MD5

29de50aba091b2b76d67a2be15ea0951
SHA1

fece7417b2a4d0ff7473d33c7d13320b03fdd429
SHA256

0bb1322813af63fc1a50b68e394f00e0e9a2860a811fed53b52fb432bb77ffd0
SHA512

aded46cdb988860aa5bcd7e0ccbfaf6acc1693f4589ea422103a1618af264f7e858d31224e90a503c54f53d46e2aa683a52eb3b037c9878974c29c4f5df11bb6
SSDEEP

1536:r2kRN0COKgArjM9fukSaErDY1TpoL7Dx2:SUuCOKgArg9xG/YToLo

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.137.80:4444

Targets

- Target
  
  0bb1322813af63fc1a50b68e394f00e0e9a2860a811fed53b52fb432bb77ffd0
- Size
  
  57KB
- MD5
  
  29de50aba091b2b76d67a2be15ea0951
- SHA1
  
  fece7417b2a4d0ff7473d33c7d13320b03fdd429
- SHA256
  
  0bb1322813af63fc1a50b68e394f00e0e9a2860a811fed53b52fb432bb77ffd0
- SHA512
  
  aded46cdb988860aa5bcd7e0ccbfaf6acc1693f4589ea422103a1618af264f7e858d31224e90a503c54f53d46e2aa683a52eb3b037c9878974c29c4f5df11bb6
- SSDEEP
  
  1536:r2kRN0COKgArjM9fukSaErDY1TpoL7Dx2:SUuCOKgArg9xG/YToLo
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan