metasploit | 0203935447a499e04704f48442dac69658ded78defdf6af21d2a7f46fb83ef1c | Triage

Sharing

General

Target

0203935447a499e04704f48442dac69658ded78defdf6af21d2a7f46fb83ef1c
Size

2.3MB
Sample

250325-njv51avxht
MD5

ae7adf1cb1c34114e6d527a43d5c28b5
SHA1

15b0bc002714e725a805a8bf471a939dcc814fce
SHA256

0203935447a499e04704f48442dac69658ded78defdf6af21d2a7f46fb83ef1c
SHA512

5454fb6b6b06ade6f9459884999739934ad4a21a211bc48ac20978105ef5d741f2fdd12ba424238116be012e468645936e280f36cbb3d1ab5097edfee8a309b8
SSDEEP

49152:xr/KPLe0RLCxriiiiINsMdRPLe0RLCxriiiiINs8F:xrmLB0WiRIeM/LB0WiRIe8

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:1999

Targets

- Target
  
  0203935447a499e04704f48442dac69658ded78defdf6af21d2a7f46fb83ef1c
- Size
  
  2.3MB
- MD5
  
  ae7adf1cb1c34114e6d527a43d5c28b5
- SHA1
  
  15b0bc002714e725a805a8bf471a939dcc814fce
- SHA256
  
  0203935447a499e04704f48442dac69658ded78defdf6af21d2a7f46fb83ef1c
- SHA512
  
  5454fb6b6b06ade6f9459884999739934ad4a21a211bc48ac20978105ef5d741f2fdd12ba424238116be012e468645936e280f36cbb3d1ab5097edfee8a309b8
- SSDEEP
  
  49152:xr/KPLe0RLCxriiiiINsMdRPLe0RLCxriiiiINs8F:xrmLB0WiRIeM/LB0WiRIe8
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan