metasploit | cdb8b921d7e385cedbeadb7880a290419c106d02b2036f0205d2555571e14866 | Triage

Sharing

General

Target

cdb8b921d7e385cedbeadb7880a290419c106d02b2036f0205d2555571e14866
Size

97KB
Sample

241225-gjrz1szjat
MD5

7d588d33ca70f6e39bfb68a5c48fafe8
SHA1

968e618cca73900e5dd1ab5103d0d9bb83be2817
SHA256

cdb8b921d7e385cedbeadb7880a290419c106d02b2036f0205d2555571e14866
SHA512

4499fc2df3ca78f627eec06b732150a2d569f98c08c3b30630e1153aba2f73cef1a7f2181497c09bf6fe3cc50342e651d6e3ee75225f9ce1059223b2f4fb84a9
SSDEEP

1536:OFBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZXvCBj:OpfHvCl

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.3.56:1416

Targets

- Target
  
  cdb8b921d7e385cedbeadb7880a290419c106d02b2036f0205d2555571e14866
- Size
  
  97KB
- MD5
  
  7d588d33ca70f6e39bfb68a5c48fafe8
- SHA1
  
  968e618cca73900e5dd1ab5103d0d9bb83be2817
- SHA256
  
  cdb8b921d7e385cedbeadb7880a290419c106d02b2036f0205d2555571e14866
- SHA512
  
  4499fc2df3ca78f627eec06b732150a2d569f98c08c3b30630e1153aba2f73cef1a7f2181497c09bf6fe3cc50342e651d6e3ee75225f9ce1059223b2f4fb84a9
- SSDEEP
  
  1536:OFBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZXvCBj:OpfHvCl
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2