Overview

overview

10

Static

static

3

7031eae4a4...2b.exe

windows7-x64

10

7031eae4a4...2b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7031eae4a4b95dbb5d6dc3f74e54652e5eb3d2c90d20212099a5e7491f5f0b2b

  • Size

    37KB

  • Sample

    231001-kacqhshf9x

  • MD5

    c594c5493da4ea8ff6183ddd84314413

  • SHA1

    1f97e3771f71e85e263c08138c5822cd5cf5e9b8

  • SHA256

    7031eae4a4b95dbb5d6dc3f74e54652e5eb3d2c90d20212099a5e7491f5f0b2b

  • SHA512

    e40ecb264602bc609cd6ed8d2e82142ab62678e312bf36954c3627285b01e02c9a9b1d5628ecbf50f04c7b3285da04881fc962351eaff200c3d1f46c950a9260

  • SSDEEP

    384:s0CFBZdQ8ZfmsxLYenWnpPO0sfjLxr4wPhVZwaBl7qHTRxj:sDFBZ+8NHxLYkWnpWT1hVvBl7mRp

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://123.60.171.65:7878/FtRP

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUS)

Targets

    • Target

      7031eae4a4b95dbb5d6dc3f74e54652e5eb3d2c90d20212099a5e7491f5f0b2b

    • Size

      37KB

    • MD5

      c594c5493da4ea8ff6183ddd84314413

    • SHA1

      1f97e3771f71e85e263c08138c5822cd5cf5e9b8

    • SHA256

      7031eae4a4b95dbb5d6dc3f74e54652e5eb3d2c90d20212099a5e7491f5f0b2b

    • SHA512

      e40ecb264602bc609cd6ed8d2e82142ab62678e312bf36954c3627285b01e02c9a9b1d5628ecbf50f04c7b3285da04881fc962351eaff200c3d1f46c950a9260

    • SSDEEP

      384:s0CFBZdQ8ZfmsxLYenWnpPO0sfjLxr4wPhVZwaBl7qHTRxj:sDFBZ+8NHxLYkWnpWT1hVvBl7mRp

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks