Overview

overview

10

Static

static

10

3353325c1e...a0.exe

windows7-x64

10

3353325c1e...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0

  • Size

    416KB

  • Sample

    220919-j4hcesffh7

  • MD5

    1c899730d4b08554daf3c2e0a75a7f3a

  • SHA1

    3bfb20580f1c6d61b12688a8df5943f315fc18dd

  • SHA256

    3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0

  • SHA512

    2cac01881456c9e78d3e76cabb4b18fc108a8a5a6c884692bc34c4c2806c31cfd3bcd65c7cf5e178e0ac65f40bf6f88c41ec50e0a8bff3fde7aa092273277e85

  • SSDEEP

    12288:pbWm23htV4dEvM7IF7MwvFg5exc9X2qijc3rdtT:pbWm2336EvYGtg5ALqb

Score
10/10
metasploitbackdoortrojanupx

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

79.138.104.162:443

Targets

    • Target

      3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0

    • Size

      416KB

    • MD5

      1c899730d4b08554daf3c2e0a75a7f3a

    • SHA1

      3bfb20580f1c6d61b12688a8df5943f315fc18dd

    • SHA256

      3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0

    • SHA512

      2cac01881456c9e78d3e76cabb4b18fc108a8a5a6c884692bc34c4c2806c31cfd3bcd65c7cf5e178e0ac65f40bf6f88c41ec50e0a8bff3fde7aa092273277e85

    • SSDEEP

      12288:pbWm23htV4dEvM7IF7MwvFg5exc9X2qijc3rdtT:pbWm2336EvYGtg5ALqb

    Score
    10/10
    metasploitbackdoortrojanupx

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks