Overview

overview

10

Static

static

ffd51f3de4...cd.dll

windows7_x64

10

ffd51f3de4...cd.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5409101633060864.zip

  • Size

    254KB

  • Sample

    201123-72yx2sc1bj

  • MD5

    e9c85afc2588368d4416a77df40d51ff

  • SHA1

    2e6033a02be06ff26907dd5cd882cf730161606d

  • SHA256

    e7eca2261948a7cdf76dcb3c77b72dd9ccdc2f6cda7de7f02b615ef0152dd778

  • SHA512

    a1e6143c1b8a726f7f06bd48746fe793f3033599a3016335d5a613e9cabf23405849941a180e366d19bf177417d57498c73687e7bba83b756e55395a2b93abef

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://servicegungster.com:443/image-directory/case.gif

Targets

    • Target

      ffd51f3de4ba08508ca7c19dd15676c2c8f4a61891c1dea297bb648633485bcd

    • Size

      673KB

    • MD5

      b75840aa5b36fe12522f785561a03521

    • SHA1

      2989b2650ba134e3a2ea31108f0c9f7c61817069

    • SHA256

      ffd51f3de4ba08508ca7c19dd15676c2c8f4a61891c1dea297bb648633485bcd

    • SHA512

      003f526ab35b61b149f28cd4b4d24a861edcb9734ad53e462a2779eb793b47b77d44dbca7dbdfeda64b5cd4d7c1b4f339964db6a9b53f1cd77c6690bc60b8cec

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks