Overview

overview

10

Static

static

c37844be4d...a4.exe

windows7_x64

10

c37844be4d...a4.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c37844be4d12825522c91dc7f0eb84331f1ae5da94e4640134b10d1a4610f9a4

  • Size

    14KB

  • Sample

    201108-fhsfnatmqs

  • MD5

    84b32e259e1549467f50be1d01cf32e9

  • SHA1

    05a1f3a6881464b3017046e9db1f36636170a6dd

  • SHA256

    c37844be4d12825522c91dc7f0eb84331f1ae5da94e4640134b10d1a4610f9a4

  • SHA512

    ce83bb2dd9db49de7f593e8c615273c0afa4088aec83b1dc9d4dcee46a612298dc76e103d2abab7a59a381e6a1518ae0b8463749f9898aba1a0d36ddfd2aacb7

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://10.2.55.106:60444/BVtP

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; BOIE9;ENUS)

Targets

    • Target

      c37844be4d12825522c91dc7f0eb84331f1ae5da94e4640134b10d1a4610f9a4

    • Size

      14KB

    • MD5

      84b32e259e1549467f50be1d01cf32e9

    • SHA1

      05a1f3a6881464b3017046e9db1f36636170a6dd

    • SHA256

      c37844be4d12825522c91dc7f0eb84331f1ae5da94e4640134b10d1a4610f9a4

    • SHA512

      ce83bb2dd9db49de7f593e8c615273c0afa4088aec83b1dc9d4dcee46a612298dc76e103d2abab7a59a381e6a1518ae0b8463749f9898aba1a0d36ddfd2aacb7

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks