Overview

overview

10

Static

static

7

77227a84a2...e1.exe

windows7-x64

10

77227a84a2...e1.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    77227a84a225e61a6d51d278079e90e1

  • Size

    1.0MB

  • Sample

    240126-mn36qsdadr

  • MD5

    77227a84a225e61a6d51d278079e90e1

  • SHA1

    b872ed09e4b45863e2bbd63b7e2d403058554392

  • SHA256

    5979c60b058063a0f1b503e1220d220a4a3a262ea9c6f9d34b67d3a3a575d101

  • SHA512

    7f1da23ba936bcdaaabc0795a16de607a084f6ac320fcd4962afd21c28c9270e235753cf2b22793ab14896941e8dcd6873005944ce31c1ad7944eb2b23eeb543

  • SSDEEP

    24576:KNjPoavlb3o9KgGBWv2E2MwNLHN6cCFa80IgvrgI9/GB+fDj:KJoaFNJ4v2xLtcFa8015/mu

Score
10/10
metasploitbackdoortrojanupx

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://216.128.176.111:1280/esM7

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)

Targets

    • Target

      77227a84a225e61a6d51d278079e90e1

    • Size

      1.0MB

    • MD5

      77227a84a225e61a6d51d278079e90e1

    • SHA1

      b872ed09e4b45863e2bbd63b7e2d403058554392

    • SHA256

      5979c60b058063a0f1b503e1220d220a4a3a262ea9c6f9d34b67d3a3a575d101

    • SHA512

      7f1da23ba936bcdaaabc0795a16de607a084f6ac320fcd4962afd21c28c9270e235753cf2b22793ab14896941e8dcd6873005944ce31c1ad7944eb2b23eeb543

    • SSDEEP

      24576:KNjPoavlb3o9KgGBWv2E2MwNLHN6cCFa80IgvrgI9/GB+fDj:KJoaFNJ4v2xLtcFa8015/mu

    Score
    10/10
    metasploitbackdoortrojanupx

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks