Overview

overview

10

Static

static

10

krwNsWDZJ.exe

windows7_x64

10

krwNsWDZJ.exe

windows10-2004_x64

10

Resubmissions

08-06-2022 01:12

220608-bkmtsshdg4 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    krwNsWDZJ.virus

  • Size

    4KB

  • Sample

    220608-bkmtsshdg4

  • MD5

    1f22e11d0f91d1e2e32ef5d5b8951767

  • SHA1

    2af16c31f88ec756bba2d6777730842f1b7d518c

  • SHA256

    2cd455a348b55ca3809ce16bad516a37f798370e9cd264303e327ef147b6c613

  • SHA512

    d7fb6079fe1f02baf46bbfb812d2c3144b32cd43ea36485184ea85d085fc425ca59301e7321a1c1f8da0df8392e5317ff526726d262d2ae62ab9326ae9d1c636

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.97.56.220:4444

Targets

    • Target

      krwNsWDZJ.virus

    • Size

      4KB

    • MD5

      1f22e11d0f91d1e2e32ef5d5b8951767

    • SHA1

      2af16c31f88ec756bba2d6777730842f1b7d518c

    • SHA256

      2cd455a348b55ca3809ce16bad516a37f798370e9cd264303e327ef147b6c613

    • SHA512

      d7fb6079fe1f02baf46bbfb812d2c3144b32cd43ea36485184ea85d085fc425ca59301e7321a1c1f8da0df8392e5317ff526726d262d2ae62ab9326ae9d1c636

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks