Overview

overview

10

Static

static

10

082HermioneLM.exe

windows7-x64

10

082HermioneLM.exe

windows10-2004-x64

10

Resubmissions

12/06/2023, 09:08

230612-k35l1abb63 10

20/05/2023, 14:49

230520-r617bacg98 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    082HermioneLM.exe

  • Size

    108KB

  • Sample

    230520-r617bacg98

  • MD5

    a4bcc6aa7da11d5202f7914a9cdc95a6

  • SHA1

    813435533c9b9249c9ad25b966ad1ed5c8915a8f

  • SHA256

    a857544f055d8d01a6c8dcf7c2d24ba065ba3c11800b8ce72d3eb530ab6321c6

  • SHA512

    7ed735b0018d2e89018e240354b078bf76ceab92492483c6a81fe8b7793412a66c72493066e05bfb6c1247ec2261fa104635dfeebc3ff093c1f12782f6287ecb

  • SSDEEP

    1536:mSbWSdNSsbfhjwXR3sZFs9zBWqycBWbH7qBgLa81HR:jWmrZFsStNHR

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://193.117.208.107:7200/31JUksFXhBvwUvFTlAzaIQtzWnOlOaTKypZLbPiJKB_VfrRs2abOAAlbxbYPprB7vIi1UjYX6P9qzFMRe

Targets

    • Target

      082HermioneLM.exe

    • Size

      108KB

    • MD5

      a4bcc6aa7da11d5202f7914a9cdc95a6

    • SHA1

      813435533c9b9249c9ad25b966ad1ed5c8915a8f

    • SHA256

      a857544f055d8d01a6c8dcf7c2d24ba065ba3c11800b8ce72d3eb530ab6321c6

    • SHA512

      7ed735b0018d2e89018e240354b078bf76ceab92492483c6a81fe8b7793412a66c72493066e05bfb6c1247ec2261fa104635dfeebc3ff093c1f12782f6287ecb

    • SSDEEP

      1536:mSbWSdNSsbfhjwXR3sZFs9zBWqycBWbH7qBgLa81HR:jWmrZFsStNHR

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks