Overview

overview

10

Static

static

7e8dd90b84...58.exe

windows7_x64

10

7e8dd90b84...58.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e8dd90b84b06fabd9e5290af04c4432da86e631ab6678a8726361fb45bece58

  • Size

    15KB

  • Sample

    220512-ns838afghr

  • MD5

    759f0482947bb60a59d095676cfaf743

  • SHA1

    221e745715b6ff05848bec55aa82efcd1988562e

  • SHA256

    7e8dd90b84b06fabd9e5290af04c4432da86e631ab6678a8726361fb45bece58

  • SHA512

    f7cefe5fdbad5174400850101b7019a11f3697d721e7f90fd62561c7bc3d18845f590f940b15bdde3855408208d7afce325c38418c8b9c8fc3c1c437ad35a64a

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://172.29.25.27:8001/xm6A

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAARJS)

Targets

    • Target

      7e8dd90b84b06fabd9e5290af04c4432da86e631ab6678a8726361fb45bece58

    • Size

      15KB

    • MD5

      759f0482947bb60a59d095676cfaf743

    • SHA1

      221e745715b6ff05848bec55aa82efcd1988562e

    • SHA256

      7e8dd90b84b06fabd9e5290af04c4432da86e631ab6678a8726361fb45bece58

    • SHA512

      f7cefe5fdbad5174400850101b7019a11f3697d721e7f90fd62561c7bc3d18845f590f940b15bdde3855408208d7afce325c38418c8b9c8fc3c1c437ad35a64a

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks