Overview

overview

10

Static

static

3

48d7b888a7...11.exe

windows7_x64

10

48d7b888a7...11.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48d7b888a77feaa3dcd80ecf80bf694ee73a2547abe05737fde342fb43c1e411

  • Size

    6.6MB

  • Sample

    211106-c614zsaecq

  • MD5

    013a5aad57228c44a7658f053fbec406

  • SHA1

    706e98031925086a6c817cb1058de36533694a92

  • SHA256

    48d7b888a77feaa3dcd80ecf80bf694ee73a2547abe05737fde342fb43c1e411

  • SHA512

    5c2507ec23a21b356d60702e2cca37826a0ba10ee524e77a3183506d8fa75040ff01e2cb234d7cdba91d19da0777f349bb636220e3a0a13cd1a1fa90e1497d22

Score
10/10
metasploitbackdoorpyinstallertrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

47.94.236.117:6688

Targets

    • Target

      48d7b888a77feaa3dcd80ecf80bf694ee73a2547abe05737fde342fb43c1e411

    • Size

      6.6MB

    • MD5

      013a5aad57228c44a7658f053fbec406

    • SHA1

      706e98031925086a6c817cb1058de36533694a92

    • SHA256

      48d7b888a77feaa3dcd80ecf80bf694ee73a2547abe05737fde342fb43c1e411

    • SHA512

      5c2507ec23a21b356d60702e2cca37826a0ba10ee524e77a3183506d8fa75040ff01e2cb234d7cdba91d19da0777f349bb636220e3a0a13cd1a1fa90e1497d22

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks