metasploit | b79061c73446d2bedfb1aade45472636a7b8cb4c11d7427c3cacfa3b473643ca | Triage

Sharing

General

Target

483563460e53715c6c0a8aeadd85b885.bin
Size

43KB
Sample

241229-blr5xaxqdj
MD5

dfa55f0097bcc475fc132359b0d44073
SHA1

b59d19d9e7e8ccdfaf958b1986cbbe7746629e08
SHA256

b79061c73446d2bedfb1aade45472636a7b8cb4c11d7427c3cacfa3b473643ca
SHA512

4dc7564870be6e8cc805df2d1b696950a09a01c24ed89a6783af2e8375db310cf97e26ac345dbf734bb4182c1325a475d7d1a0cde9e8fb35dea9a7657374d195
SSDEEP

768:AF2zt/zYxwiBPqPRPLtFOWjsRtNFDil0d3HSSBIYDNt8hsd1ZGBln:C2zt/8xwiBPEphwrDDil0FyGDHWspGBN

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

18.209.65.151:4444

Targets

- Target
  
  001cd014461d6151ffd27d7bfb7809c6be1d50ffec7450e25352ac208570d1b6.exe
- Size
  
  72KB
- MD5
  
  483563460e53715c6c0a8aeadd85b885
- SHA1
  
  f0ffdeae4b44048924c63a157dd619f5327253f3
- SHA256
  
  001cd014461d6151ffd27d7bfb7809c6be1d50ffec7450e25352ac208570d1b6
- SHA512
  
  9f530ee651cdd61f0f9b914f5d29ce937ec1fdf1aa417d6f16153f2d8eff8d0fd95807c77de2746308ffa3dc59a5c9a14ae59827848192a5716f2f913793fa41
- SSDEEP
  
  1536:I72wXHc78gqXVnzeEBVAl8cT0TZMb+KR0Nc8QsJq39:M2wK8g+VaEoPYTZe0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan