metasploit

General

Target

0be57484da160416bb187552668685a1825b45c468dc45c389d6cfd68c9de46c.exe
Size

72KB
Sample

241231-hma2cazkel
MD5

bb22ed010016dc684a703c315a7fafb2
SHA1

c6498a7991e6546b06039222294052d97c5d261e
SHA256

0be57484da160416bb187552668685a1825b45c468dc45c389d6cfd68c9de46c
SHA512

ec4773f5b062c8e067b0606fdb8fb1248531a1ca00123800891fb099b3f3c38c74321e4559a37e7f47e03ecc0f87dd7b905125bebb0a0ea60aa53f9c16d96083
SSDEEP

1536:IUXj5i6tKUV+bkqjD82Q65WFKIrTMb+KR0Nc8QsJq3l:lft9+brjo2QI/IrTe0Nc8QsCl

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.93.128:8080/jSj1aHmSCBT-Qv9DmSWQjgT9Hyv5Z6ElbCDVoF-StRBoyj7jM-jKCjlzbxpjEGBYGY-JtboDQ-UknDwPIv-sm4xQtRCeTidU-ViRHn-WGeZ5L-uTcL33X4uxeW2Msin48rWhx-3EApbufwfMmaDs74Yp09WbR268wJoFqxeotdmVuTInbSGJu8jek3y

Targets

- Target
  
  0be57484da160416bb187552668685a1825b45c468dc45c389d6cfd68c9de46c.exe
- Size
  
  72KB
- MD5
  
  bb22ed010016dc684a703c315a7fafb2
- SHA1
  
  c6498a7991e6546b06039222294052d97c5d261e
- SHA256
  
  0be57484da160416bb187552668685a1825b45c468dc45c389d6cfd68c9de46c
- SHA512
  
  ec4773f5b062c8e067b0606fdb8fb1248531a1ca00123800891fb099b3f3c38c74321e4559a37e7f47e03ecc0f87dd7b905125bebb0a0ea60aa53f9c16d96083
- SSDEEP
  
  1536:IUXj5i6tKUV+bkqjD82Q65WFKIrTMb+KR0Nc8QsJq3l:lft9+brjo2QI/IrTe0Nc8QsCl
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Metasploit family

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2