metasploit | 1113e2ae6ca657046b7e9a1c92e37be153719e56c20e2b862f040455ede17e14

General

Target
2026-04-15_ce6d3993db342e5fb90054def1a561ed_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
Size 8.2MB
Sample260415-spt74sdx71
SHA256 1113e2ae6ca657046b7e9a1c92e37be153719e56c20e2b862f040455ede17e14
MD5 ce6d3993db342e5fb90054def1a561ed
SHA1 6cf95671a1ccdf98ad79f1dba66791dc88aeb25b
SHA512 ef8d97457a345fb5474b3b69a97ff21e7f447bedc91d4c94c69ff54fc705e3c246e0cf0086c2159931551981e43bc448a9f94b96bb8a60491e7bd6708f8d4648
SSDEEP 196608:pwA78Dh8qBA1HeT39IigQ7vKub75bcjWgb2zfzwkZiAGioLPtQd:N89vq1+TtIiL7vB5IjWq2zzi39ed
TLSH
T18B86335473F91CFAE5F3533581E28886EE72B4595BB2CACF17B852D11F1338289396A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

220.124.29.218:4443

Targets

- Target
  2026-04-15_ce6d3993db342e5fb90054def1a561ed_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 8.2MB
- SHA256 1113e2ae6ca657046b7e9a1c92e37be153719e56c20e2b862f040455ede17e14
- MD5 ce6d3993db342e5fb90054def1a561ed
- SHA1 6cf95671a1ccdf98ad79f1dba66791dc88aeb25b
- SHA512 ef8d97457a345fb5474b3b69a97ff21e7f447bedc91d4c94c69ff54fc705e3c246e0cf0086c2159931551981e43bc448a9f94b96bb8a60491e7bd6708f8d4648
- SSDEEP 196608:pwA78Dh8qBA1HeT39IigQ7vKub75bcjWgb2zfzwkZiAGioLPtQd:N89vq1+TtIiL7vB5IjWq2zzi39ed
- TLSH
  T18B86335473F91CFAE5F3533581E28886EE72B4595BB2CACF17B852D11F1338289396A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery metasploit trojan
- Family: MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Executes dropped EXE
- Loads dropped DLL
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

1

T1057

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: MetaSploit

Executes dropped EXE

Loads dropped DLL

Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2