metasploit | ceba09dc5368ded2d7d5b62bd36fdecbd47aee8f3219abfd2ca32f31b0eba7b0 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ceba09dc5368ded2d7d5b62bd36fdecbd47aee8f3219abfd2ca32f31b0eba7b0
Size 3.4MB
Sample200908-kdk9ydj296
SHA256 ceba09dc5368ded2d7d5b62bd36fdecbd47aee8f3219abfd2ca32f31b0eba7b0
MD5 97e9bd85aad231de56b05e9872ffb2f6
SHA1 146a1e3d28dc53805af0dc105b4b4d0232dfa1d8
SHA512 1f52e0069586148ce383d9b526fe803e2d8f978a0c8f99b51995172a11c6fda21ba976ea2576053f129d3b0a3f9e8d0be1ae6213cd6a039c52c17fbb853e5f66
MD5 SHA1 SHA512

Score

10^/10

metasploit backdoor trojan upx

Malware Config

Targets

- Target
  ceba09dc5368ded2d7d5b62bd36fdecbd47aee8f3219abfd2ca32f31b0eba7b0
- Size 3.4MB
- SHA256 ceba09dc5368ded2d7d5b62bd36fdecbd47aee8f3219abfd2ca32f31b0eba7b0
- MD5 97e9bd85aad231de56b05e9872ffb2f6
- SHA1 146a1e3d28dc53805af0dc105b4b4d0232dfa1d8
- SHA512 1f52e0069586148ce383d9b526fe803e2d8f978a0c8f99b51995172a11c6fda21ba976ea2576053f129d3b0a3f9e8d0be1ae6213cd6a039c52c17fbb853e5f66
- MD5 SHA1 SHA512
Score

10^/10

upx trojan backdoor metasploit
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Suspicious use of NtCreateProcessExOtherParentProcess
- ServiceHost packer
  Detects ServiceHost packer used for .NET malware
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- JavaScript code in executable
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

upxtrojanbackdoormetasploit