Overview

overview

10

Static

static

7217ed367a...08.exe

windows7_x64

10

7217ed367a...08.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7217ed367a528c6404c9f8da2387a108.exe

  • Size

    55KB

  • Sample

    210306-mm122aty66

  • MD5

    7217ed367a528c6404c9f8da2387a108

  • SHA1

    7aed398895b9a02b74b8905480ce53a243be3c0b

  • SHA256

    34ad78b63ae71cc1ffda60c572b89ad931abd237499c8aeb3372ee00816e0300

  • SHA512

    71d8499e52e33783d19ff399f5d392d8525f2176364402dc830b522181b50e0290e5e98f39e531129d1e172555d2e4477969b6025bff9871b3c3c4636eb421c8

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://182.92.155.100:443/collect/v2/

Attributes
  • headers Host: www.microsoft.com Accept: */* Accept-Language: en-US,en;q=0.5 X-Goog-Visitor-Id: CgtGbFYxTWlKTU96VQ== X-Microsoft-Client-Name: 56 X-Microsoft-Client-Version: 20171026 User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.40

Targets

    • Target

      7217ed367a528c6404c9f8da2387a108.exe

    • Size

      55KB

    • MD5

      7217ed367a528c6404c9f8da2387a108

    • SHA1

      7aed398895b9a02b74b8905480ce53a243be3c0b

    • SHA256

      34ad78b63ae71cc1ffda60c572b89ad931abd237499c8aeb3372ee00816e0300

    • SHA512

      71d8499e52e33783d19ff399f5d392d8525f2176364402dc830b522181b50e0290e5e98f39e531129d1e172555d2e4477969b6025bff9871b3c3c4636eb421c8

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks