Overview

overview

10

Static

static

113880f0ac...37.dll

windows7_x64

10

113880f0ac...37.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    113880f0ac34edce7cdc19fc151d4d974c4c0b39991ff2bc4cd6f62648d48e37

  • Size

    242KB

  • Sample

    220604-jqcj1shhfk

  • MD5

    4aeeb8d5f73f841fcf29d1f0e7565453

  • SHA1

    d093748ddd86667566c9ecfa9717e35af97c3a8b

  • SHA256

    113880f0ac34edce7cdc19fc151d4d974c4c0b39991ff2bc4cd6f62648d48e37

  • SHA512

    af1aa8d345225153da32b99ca2ea1a4a76f5fd4a6e1b88bc5e739bbc6d63743cb2749d70091cbd0fa81660bc07c0c01c4fe1af8de7518bad677cb51d815690dd

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      113880f0ac34edce7cdc19fc151d4d974c4c0b39991ff2bc4cd6f62648d48e37

    • Size

      242KB

    • MD5

      4aeeb8d5f73f841fcf29d1f0e7565453

    • SHA1

      d093748ddd86667566c9ecfa9717e35af97c3a8b

    • SHA256

      113880f0ac34edce7cdc19fc151d4d974c4c0b39991ff2bc4cd6f62648d48e37

    • SHA512

      af1aa8d345225153da32b99ca2ea1a4a76f5fd4a6e1b88bc5e739bbc6d63743cb2749d70091cbd0fa81660bc07c0c01c4fe1af8de7518bad677cb51d815690dd

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks