Overview

overview

10

Static

static

8

7e62df2b56...5a.exe

windows7-x64

10

7e62df2b56...5a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e62df2b565cc1c15eb4cad946effb8e981211383a459ddc7147d46a68c9f05a

  • Size

    63KB

  • Sample

    220731-y8xp8sgbdk

  • MD5

    5e60a735afb32c3b19b186170964ffb9

  • SHA1

    85e5c44b173b26791e0d5304f2028111250cb092

  • SHA256

    7e62df2b565cc1c15eb4cad946effb8e981211383a459ddc7147d46a68c9f05a

  • SHA512

    10b3a05a5fdcb93b80aaf832f315661576e7698b354997dc8f050295c1de8b021cef986cc3bdae8cf65125bca3db9882daeba211e6ff52d10fecfbd17cf92a67

Score
10/10
metasploitbackdoortrojanupx

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      7e62df2b565cc1c15eb4cad946effb8e981211383a459ddc7147d46a68c9f05a

    • Size

      63KB

    • MD5

      5e60a735afb32c3b19b186170964ffb9

    • SHA1

      85e5c44b173b26791e0d5304f2028111250cb092

    • SHA256

      7e62df2b565cc1c15eb4cad946effb8e981211383a459ddc7147d46a68c9f05a

    • SHA512

      10b3a05a5fdcb93b80aaf832f315661576e7698b354997dc8f050295c1de8b021cef986cc3bdae8cf65125bca3db9882daeba211e6ff52d10fecfbd17cf92a67

    Score
    10/10
    metasploitbackdoortrojanupx

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks