Overview

overview

10

Static

static

10

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    7KB

  • Sample

    240415-2pstqaad39

  • MD5

    aa752f99b9bfd2ebbb36acdfdf2fa2b8

  • SHA1

    3bbc6451e5e38b907be99c5e0312acb74cffe3a3

  • SHA256

    cfa53d4cc152a779f364410b4c5a040981323c12b78fd929c11c1135b2a502f7

  • SHA512

    7e8c4a88d40720bc280e3b1b0b7d3e9aa751d22c797af683209d06a716c6d34424983648f4a02058d2421f486bcafc9a945a40762f191c6e3c76e2c2f283d4bb

  • SSDEEP

    24:eFGStrJ9u0/6hQUnZdkBQAV2ofGGKZqfeNDMSCvOXpmB:is0b4kBQ+htSD9C2kB

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

124.221.70.199:4448

Targets

    • Target

      tmp

    • Size

      7KB

    • MD5

      aa752f99b9bfd2ebbb36acdfdf2fa2b8

    • SHA1

      3bbc6451e5e38b907be99c5e0312acb74cffe3a3

    • SHA256

      cfa53d4cc152a779f364410b4c5a040981323c12b78fd929c11c1135b2a502f7

    • SHA512

      7e8c4a88d40720bc280e3b1b0b7d3e9aa751d22c797af683209d06a716c6d34424983648f4a02058d2421f486bcafc9a945a40762f191c6e3c76e2c2f283d4bb

    • SSDEEP

      24:eFGStrJ9u0/6hQUnZdkBQAV2ofGGKZqfeNDMSCvOXpmB:is0b4kBQ+htSD9C2kB

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks