metasploit | 78fa575af9bb091900738783664528dab4d5ebc8635bf011971220b23c238bc3 | Triage

Sharing

General

Target

78fa575af9bb091900738783664528dab4d5ebc8635bf011971220b23c238bc3.exe
Size

72KB
Sample

241226-vc7nsa1pcp
MD5

f57091b13f2959aacd3524295f0d81ff
SHA1

77d56ec82daccaedb18e3fdb6c827cc7423915f5
SHA256

78fa575af9bb091900738783664528dab4d5ebc8635bf011971220b23c238bc3
SHA512

3b62e933f1c261e15449225f2f0ed91499f8ab71f7d4aadca81cdd6507e35dbf845e7e0939b7b9bf4e0d2c4b4429f7c5596016dabad17c574ce523cf7b6cfdb0
SSDEEP

1536:I2otpMTiR138S8ospep60u/CIyRO4Mb+KR0Nc8QsJq3l:utMAxK10+54e0Nc8QsCl

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.182:4444

Targets

- Target
  
  78fa575af9bb091900738783664528dab4d5ebc8635bf011971220b23c238bc3.exe
- Size
  
  72KB
- MD5
  
  f57091b13f2959aacd3524295f0d81ff
- SHA1
  
  77d56ec82daccaedb18e3fdb6c827cc7423915f5
- SHA256
  
  78fa575af9bb091900738783664528dab4d5ebc8635bf011971220b23c238bc3
- SHA512
  
  3b62e933f1c261e15449225f2f0ed91499f8ab71f7d4aadca81cdd6507e35dbf845e7e0939b7b9bf4e0d2c4b4429f7c5596016dabad17c574ce523cf7b6cfdb0
- SSDEEP
  
  1536:I2otpMTiR138S8ospep60u/CIyRO4Mb+KR0Nc8QsJq3l:utMAxK10+54e0Nc8QsCl
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan