metasploit | 51f415b35bde63c99353aa076d2441f890f190ee3a6190bb486c21dd71ad9cb4 | Triage

Sharing

General

Target

anan.pdf
Size

45KB
Sample

250323-rphnmstsew
MD5

b2f7ebdcf70cf2210918c9dfdd45b6cf
SHA1

854f97c670ef309ffe9ae92e40e41652a0c7582b
SHA256

51f415b35bde63c99353aa076d2441f890f190ee3a6190bb486c21dd71ad9cb4
SHA512

db9b4aa7c5a69df630b4c71ac2f857d74edf1545606c41fd56cddb2dce9a261428d9d9481add0d2c79fe633adfdfcb32fb00317b90bac63fde717dd5fc969c0f
SSDEEP

768:cWUaQvmyMvRv5W67aeKvG2NtO+s2NpiCchMkFA5gygUVNLbtTe4dXKS5kBDcR:c3awmfvRU6mNvnNc28APPLTdpwcR

Score

10^/10

metasploit backdoor discovery javascript pdf trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:443

Targets

- Target
  
  anan.pdf
- Size
  
  45KB
- MD5
  
  b2f7ebdcf70cf2210918c9dfdd45b6cf
- SHA1
  
  854f97c670ef309ffe9ae92e40e41652a0c7582b
- SHA256
  
  51f415b35bde63c99353aa076d2441f890f190ee3a6190bb486c21dd71ad9cb4
- SHA512
  
  db9b4aa7c5a69df630b4c71ac2f857d74edf1545606c41fd56cddb2dce9a261428d9d9481add0d2c79fe633adfdfcb32fb00317b90bac63fde717dd5fc969c0f
- SSDEEP
  
  768:cWUaQvmyMvRv5W67aeKvG2NtO+s2NpiCchMkFA5gygUVNLbtTe4dXKS5kBDcR:c3awmfvRU6mNvnNc28APPLTdpwcR
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  template.pdf
- Size
  
  72KB
- MD5
  
  d1ef7e603bd17a12865e6769807e4be5
- SHA1
  
  f5ae03a2e8b6b74d48cda18ed54ac123f0841408
- SHA256
  
  b124841a4e37d0b6eb550d948e5e2166ee0e07ef2c2a5ca47918c029634058da
- SHA512
  
  baad36cfb897e45f2ad5395285627cea5bbb939c81d964dd7c95fd9273eed262a19eb745378d9f9aff04f9013e0f571f78ffc73ef8ac900d67c20de5b00dcbeb
- SSDEEP
  
  1536:IMUBxUoeP7XL4isQndtz8mMb+KR0Nc8QsJq39:RT7XAQf8me0Nc8QsC9
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pdfjavascriptmetasploit

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

behavioral3

metasploitbackdoordiscoverytrojan

behavioral4

metasploitbackdoordiscoverytrojan