metasploit | 9be818a44173a953b708d282de254df6f02f43a4acf1812fc012f7bff20a5503 | Triage

Sharing

General

Target

msf500k.ps1
Size

501KB
Sample

250328-jhp55stshw
MD5

bbf15ca69b0688ec777475f84edda743
SHA1

ce5bd93e1ccb39def7b8e29cd2beb9d3964f171b
SHA256

9be818a44173a953b708d282de254df6f02f43a4acf1812fc012f7bff20a5503
SHA512

6d004da4f7a3897ade855fa734fc1ae52be66b2667c0af91bdf886cb42afc2b5037ceef943e262977d23ff43b7be4372268c4bfc037cb01b94cf69c4bca4d837
SSDEEP

48:q+MThimb7RBARAbLPorNfAse3+soGoNeVBXTSbS4:BGTXA0PohfXBGoCJ+z

Score

10^/10

metasploit backdoor execution trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.254.66.59:8888

Targets

- Target
  
  msf500k.ps1
- Size
  
  501KB
- MD5
  
  bbf15ca69b0688ec777475f84edda743
- SHA1
  
  ce5bd93e1ccb39def7b8e29cd2beb9d3964f171b
- SHA256
  
  9be818a44173a953b708d282de254df6f02f43a4acf1812fc012f7bff20a5503
- SHA512
  
  6d004da4f7a3897ade855fa734fc1ae52be66b2667c0af91bdf886cb42afc2b5037ceef943e262977d23ff43b7be4372268c4bfc037cb01b94cf69c4bca4d837
- SSDEEP
  
  48:q+MThimb7RBARAbLPorNfAse3+soGoNeVBXTSbS4:BGTXA0PohfXBGoCJ+z
Score

10^/10

metasploit backdoor execution trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoorexecutiontrojan

behavioral2

metasploitbackdoorexecutiontrojan