Overview

overview

10

Static

static

3

2024-02-05...ia.exe

windows7-x64

10

2024-02-05...ia.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2024-02-05_09ef3f1729afae68af46f1ef5a11347c_karagany_mafia
  • Size 2.9MB
  • Sample240205-srekfachgl
  • SHA256 2da778e424290eac8d86493433451545f1edf48f0abf9bdb57efccb332708fc1
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

  • metasploit

Version

  • encoder/shikata_ga_nai

Extracted

Family

  • metasploit

Version

  • windows/download_exec

C2

  • http://216.24.57.3:853/xsGu

Targets

    • Target
      2024-02-05_09ef3f1729afae68af46f1ef5a11347c_karagany_mafia
    • Size 2.9MB
    • SHA256 2da778e424290eac8d86493433451545f1edf48f0abf9bdb57efccb332708fc1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks