Overview

overview

10

Static

static

1b2b8cb04b...8b.exe

windows7_x64

10

1b2b8cb04b...8b.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b2b8cb04b6aca7d35061c7b6337a05b6d74fff7604a5afcd9161650ff55238b

  • Size

    864KB

  • Sample

    220127-1m5j3abbbm

  • MD5

    17be9811767ee50b75ef86a57b4c901b

  • SHA1

    de7a063e554aeaf247654e8ba004df14a7f26edb

  • SHA256

    1b2b8cb04b6aca7d35061c7b6337a05b6d74fff7604a5afcd9161650ff55238b

  • SHA512

    59212cb1c718df94f8938bad7ae717e3283a14dc8c5cc22b4f4717357337f785559eab6ceefeda2de62f858e0d71e8914a194604015982a5a1ca027bb3210abf

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      1b2b8cb04b6aca7d35061c7b6337a05b6d74fff7604a5afcd9161650ff55238b

    • Size

      864KB

    • MD5

      17be9811767ee50b75ef86a57b4c901b

    • SHA1

      de7a063e554aeaf247654e8ba004df14a7f26edb

    • SHA256

      1b2b8cb04b6aca7d35061c7b6337a05b6d74fff7604a5afcd9161650ff55238b

    • SHA512

      59212cb1c718df94f8938bad7ae717e3283a14dc8c5cc22b4f4717357337f785559eab6ceefeda2de62f858e0d71e8914a194604015982a5a1ca027bb3210abf

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks