Overview

overview

10

Static

static

2fd38911f0...35.exe

windows7_x64

10

2fd38911f0...35.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fd38911f08f6ebd447c6f7466ea6cbf9dfd472a3fd20b7ac9cdf1d3cbed0e35

  • Size

    1.2MB

  • Sample

    220127-zfaknsafh3

  • MD5

    3c28605ba9465db98e45a4dc89909304

  • SHA1

    0884f9c59ffa2039f3b9ef663cfadf080d00c150

  • SHA256

    2fd38911f08f6ebd447c6f7466ea6cbf9dfd472a3fd20b7ac9cdf1d3cbed0e35

  • SHA512

    87c03f7fbb010804d4d6c9b69ca6b8b9b8d924cadcf7b4f09125efb8119c2264c8fef8f5a8b9a73c2f232d4c480f7dcdddb7ed1e475b5c17a6ebb35594cca80d

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      2fd38911f08f6ebd447c6f7466ea6cbf9dfd472a3fd20b7ac9cdf1d3cbed0e35

    • Size

      1.2MB

    • MD5

      3c28605ba9465db98e45a4dc89909304

    • SHA1

      0884f9c59ffa2039f3b9ef663cfadf080d00c150

    • SHA256

      2fd38911f08f6ebd447c6f7466ea6cbf9dfd472a3fd20b7ac9cdf1d3cbed0e35

    • SHA512

      87c03f7fbb010804d4d6c9b69ca6b8b9b8d924cadcf7b4f09125efb8119c2264c8fef8f5a8b9a73c2f232d4c480f7dcdddb7ed1e475b5c17a6ebb35594cca80d

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks