metasploit | dd47601966c42d8fb6547e06e5c814d5db979baa669d9e08a81b13366a385854 | Triage

Sharing

General

Target

dd47601966c42d8fb6547e06e5c814d5db979baa669d9e08a81b13366a385854N.exe
Size

72KB
Sample

241225-tzjpssymfl
MD5

728a8f60e1fa41b280764c5c1bf7f020
SHA1

69fc6858df6009b902267fbb01c86fe39e831061
SHA256

dd47601966c42d8fb6547e06e5c814d5db979baa669d9e08a81b13366a385854
SHA512

1046626f367847bcd2607ad7afc0fc49edfb060c4adc143cb56e75dc28926141226900f2be1045102b7ace9a550ab5d2758296e52c9aec01dc09eb5f5e0d85c9
SSDEEP

1536:IQmKAjueqxnVbxW68kkfU6EvxMb+KR0Nc8QsJq39:5RfxnLe/ce0Nc8QsC9

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.64.3:4444

Targets

- Target
  
  dd47601966c42d8fb6547e06e5c814d5db979baa669d9e08a81b13366a385854N.exe
- Size
  
  72KB
- MD5
  
  728a8f60e1fa41b280764c5c1bf7f020
- SHA1
  
  69fc6858df6009b902267fbb01c86fe39e831061
- SHA256
  
  dd47601966c42d8fb6547e06e5c814d5db979baa669d9e08a81b13366a385854
- SHA512
  
  1046626f367847bcd2607ad7afc0fc49edfb060c4adc143cb56e75dc28926141226900f2be1045102b7ace9a550ab5d2758296e52c9aec01dc09eb5f5e0d85c9
- SSDEEP
  
  1536:IQmKAjueqxnVbxW68kkfU6EvxMb+KR0Nc8QsJq39:5RfxnLe/ce0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan