Overview

overview

10

Static

static

10

0271d754dc...ea.exe

windows7_x64

10

0271d754dc...ea.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0271d754dcca50dbd6fc635b3bc62cff481e413e7f7e3b2d65d8adfe9ba331ea

  • Size

    1.7MB

  • Sample

    220528-e5ynksdbem

  • MD5

    e248655f3697df3fdce96ad5e2af3520

  • SHA1

    193dcd419cb4ac481f29525c854ba8729d87426d

  • SHA256

    0271d754dcca50dbd6fc635b3bc62cff481e413e7f7e3b2d65d8adfe9ba331ea

  • SHA512

    dcbec146716196a86168407bbb9b3258daea0d71e517dbb99891f6a47f1af8dc74d1e674c038109f26ffeba576572b2a5cd6dd822dd5e5ac24f19f08705e6ed7

Score
10/10
metasploitbackdoortrojanupx

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

45.76.96.233:80

Targets

    • Target

      0271d754dcca50dbd6fc635b3bc62cff481e413e7f7e3b2d65d8adfe9ba331ea

    • Size

      1.7MB

    • MD5

      e248655f3697df3fdce96ad5e2af3520

    • SHA1

      193dcd419cb4ac481f29525c854ba8729d87426d

    • SHA256

      0271d754dcca50dbd6fc635b3bc62cff481e413e7f7e3b2d65d8adfe9ba331ea

    • SHA512

      dcbec146716196a86168407bbb9b3258daea0d71e517dbb99891f6a47f1af8dc74d1e674c038109f26ffeba576572b2a5cd6dd822dd5e5ac24f19f08705e6ed7

    Score
    10/10
    metasploitbackdoortrojanupx

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks