Overview

overview

10

Static

static

10

042925a1af...76.exe

windows7-x64

10

042925a1af...76.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    042925a1afb978f1f52224c75f03fd76

  • Size

    197KB

  • Sample

    231229-z2wp2aegg5

  • MD5

    042925a1afb978f1f52224c75f03fd76

  • SHA1

    f631a63572b0628d7108ea16712f373c5d3f25c1

  • SHA256

    27459dcf8b5f8db53dc1d6c3ae39503a70f80c744107f5f5444223bc11c36d3c

  • SHA512

    fb099619c1951d8153ef546abcf22745c050518f544501febba4bd0d50df219a3ac5edcc34f0d9a20cdd2112c4b0aa9009aad8f2a886634f20062f92f27d42c2

  • SSDEEP

    3072:t6LOKpt/qmUndzx+mQ1hpPvcsuqifJNg0kcq8xi6UiRh57Nz:ybqmUndx+11hpPvMxNg0kcpwiN

Score
10/10
metasploitbackdoortrojanupx

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://121.4.41.2:80/Isl4

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; XBLWP7; ZuneWP7)

Targets

    • Target

      042925a1afb978f1f52224c75f03fd76

    • Size

      197KB

    • MD5

      042925a1afb978f1f52224c75f03fd76

    • SHA1

      f631a63572b0628d7108ea16712f373c5d3f25c1

    • SHA256

      27459dcf8b5f8db53dc1d6c3ae39503a70f80c744107f5f5444223bc11c36d3c

    • SHA512

      fb099619c1951d8153ef546abcf22745c050518f544501febba4bd0d50df219a3ac5edcc34f0d9a20cdd2112c4b0aa9009aad8f2a886634f20062f92f27d42c2

    • SSDEEP

      3072:t6LOKpt/qmUndzx+mQ1hpPvcsuqifJNg0kcq8xi6UiRh57Nz:ybqmUndx+11hpPvMxNg0kcpwiN

    Score
    10/10
    metasploitbackdoortrojanupx

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks