Overview

overview

10

Static

static

3

96cca3318e...50.exe

windows7-x64

10

96cca3318e...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96cca3318ec4f4ac43e0887dc17eafef8fb70227c2ef417d1d9fbffb32042a50

  • Size

    7.0MB

  • Sample

    230830-c32akshc83

  • MD5

    865c57b3f2a00350928b27aeffe1f86e

  • SHA1

    5fa2e69519264a4686396aee05520a940e655f2d

  • SHA256

    96cca3318ec4f4ac43e0887dc17eafef8fb70227c2ef417d1d9fbffb32042a50

  • SHA512

    e0049e6ad8c46d125c7af714e1560d93cc235477d96039bb5a72ca53f896c3c7d449944876c9e5455a5c2279280704f314ac39fcea2b859c311edef30249b63b

  • SSDEEP

    196608:Naq5UuWJysVYvsO5oyMxxvjDDAxIEOGHSSGnN:JWJOoyMxtDDAx/JHzGnN

Score
10/10
metasploitbackdoorpyinstallertrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

119.13.90.176:8855

Targets

    • Target

      96cca3318ec4f4ac43e0887dc17eafef8fb70227c2ef417d1d9fbffb32042a50

    • Size

      7.0MB

    • MD5

      865c57b3f2a00350928b27aeffe1f86e

    • SHA1

      5fa2e69519264a4686396aee05520a940e655f2d

    • SHA256

      96cca3318ec4f4ac43e0887dc17eafef8fb70227c2ef417d1d9fbffb32042a50

    • SHA512

      e0049e6ad8c46d125c7af714e1560d93cc235477d96039bb5a72ca53f896c3c7d449944876c9e5455a5c2279280704f314ac39fcea2b859c311edef30249b63b

    • SSDEEP

      196608:Naq5UuWJysVYvsO5oyMxxvjDDAxIEOGHSSGnN:JWJOoyMxtDDAx/JHzGnN

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks