Overview

overview

10

Static

static

10

Dataset/pa..._0.exe

windows7-x64

10

Dataset/pa..._0.exe

windows10-2004-x64

10

Dataset/pa...13.exe

windows7-x64

10

Dataset/pa...13.exe

windows10-2004-x64

10

Dataset/pa...14.exe

windows7-x64

10

Dataset/pa...14.exe

windows10-2004-x64

10

Dataset/pa...16.exe

windows7-x64

10

Dataset/pa...16.exe

windows10-2004-x64

10

Dataset/pa...19.exe

windows7-x64

10

Dataset/pa...19.exe

windows10-2004-x64

10

Dataset/pa...25.exe

windows7-x64

10

Dataset/pa...25.exe

windows10-2004-x64

10

Dataset/pa...26.exe

windows7-x64

10

Dataset/pa...26.exe

windows10-2004-x64

10

Dataset/pa...27.exe

windows7-x64

10

Dataset/pa...27.exe

windows10-2004-x64

10

Dataset/pa...28.exe

windows7-x64

10

Dataset/pa...28.exe

windows10-2004-x64

10

Dataset/pa...29.exe

windows7-x64

10

Dataset/pa...29.exe

windows10-2004-x64

10

Dataset/pa...34.exe

windows7-x64

10

Dataset/pa...34.exe

windows10-2004-x64

10

Dataset/pa...35.exe

windows7-x64

10

Dataset/pa...35.exe

windows10-2004-x64

10

Dataset/pa...39.exe

windows7-x64

10

Dataset/pa...39.exe

windows10-2004-x64

10

Dataset/pa..._4.exe

windows7-x64

10

Dataset/pa..._4.exe

windows10-2004-x64

10

Dataset/pa...40.exe

windows7-x64

10

Dataset/pa...40.exe

windows10-2004-x64

10

Dataset/pa...41.exe

windows7-x64

10

Dataset/pa...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dataset.tar.gz

  • Size

    1.2MB

  • Sample

    240416-z8q35aee5v

  • MD5

    54264f44beb954c26cb0ac0d51a34eaa

  • SHA1

    01b61a1272a606087d77352830cc92811caa2af1

  • SHA256

    d25d574246308183b7663f3318a86825077afa2c414936949a45864c28bbff0e

  • SHA512

    235ccce68d4f2709a790695e8407d56f26a3a3580bb95ed3e211f081fe620bdd5ba86b710f0317e78d6056a9b3507d0682fe6aee727e5762d95808151dbaa18c

  • SSDEEP

    24576:IXsLYWdNj2QyKH70LIZiwBPe1nkTrG2fqvAGx1ySxm:IXgd2K0UgX1GnV2rm

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.100:4444

Targets

    • Target

      Dataset/payload_meterpreter_0.exe

    • Size

      72KB

    • MD5

      cd210db60d43c558d96b60a214d5ec04

    • SHA1

      0798c63bccdb3a00b5c5bb31503ec3cb6396cebf

    • SHA256

      eaba2c8f9b62a0a5a151022637600b2dfd1082d7be32fd2187f9d1f1f89ef17a

    • SHA512

      e35df72574defe3af34e8cfad9972192a5a7f18fbd02c73c5ad82891afb13133c6733ae8fea8df34ee3e2a2b6b0d67939b1ff8c105cb35778ad2814cf0a704bd

    • SSDEEP

      1536:IQo4sgYDpNcmsqgxkDPJqYaQWY7Z1tGTk/Mb+KR0Nc8QsJq39:1Agazf7gxvQWMXtB/e0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

    • Target

      Dataset/payload_meterpreter_13.exe

    • Size

      72KB

    • MD5

      13983c6b693faaab3a0796cdc298210d

    • SHA1

      5e73ff16bd1f2f3e1c889ae00ed48012c6724437

    • SHA256

      019b479083a95f8a3e4ca382af50c8cfe151f8af5c17380a2097792abb5f791f

    • SHA512

      2886da2d43ee23e0f54dbc9bbd305798770b30227151bce698158c4cb2dd67794a72cbcdab5aade5ad74a017b57482665de1d316474a880afd8c624857fcc320

    • SSDEEP

      1536:Ihw1Lu1Rqvl2bRgRT/XeXHH+Um/M0j9QwcqlfMb+KR0Nc8QsJq39:Xzvlm0/eXHa3B2ue0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral3behavioral4

    • Target

      Dataset/payload_meterpreter_14.exe

    • Size

      72KB

    • MD5

      25bf8ced1e0d4dc80a834f3908b71a39

    • SHA1

      85f6b672b827eb062af1f8c1b0937c821a4ed606

    • SHA256

      634d6741dbf51a0db8e0d581f04c71ba293927adac0ef0952ab844cfa110ee5f

    • SHA512

      78d897b99d051e2d6b0d336472b441837f85eecc4c355cd8fc810adbecfbf595370d8bfb12dc3677f11d813fc4c15d76be653e0aa832e239f8a7b9a66dd36eda

    • SSDEEP

      1536:IgweI5MB3RPS/jkO0huCdrsGn4+3kg6OelqyYCcA69KMb+KR0Nc8QsJq39:dC5MB3Jin0hXTJFil95QKe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral5behavioral6

    • Target

      Dataset/payload_meterpreter_16.exe

    • Size

      72KB

    • MD5

      d982479e8aa6c686ece50bf0453ec3ed

    • SHA1

      74ef3508556488e285a1bf8f3e84efc44b81a16f

    • SHA256

      e6aa1d8a2751e74367e702d7eff61aea78f64b088773ee3240c6c514f4e11434

    • SHA512

      dc230283e8da1a3c29a19e248f41b22dff1785e637ed6b59e10aa6c27038986fc0b5e4a805939cb947dd5913416ae9fd22f21ae63028d4d2ef5df8f95e4fd338

    • SSDEEP

      1536:IcP4reU5YS1scOCcwQ4yQFcKewCNvYMb+KR0Nc8QsJq39:rP46U5YiBfTyQFczNvYe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral7behavioral8

    • Target

      Dataset/payload_meterpreter_19.exe

    • Size

      72KB

    • MD5

      7100bb5634cfc1aee44092d03519dbd1

    • SHA1

      9648f7fd93e35e526f446f76e2d061f1b17320c9

    • SHA256

      3a9eacb4862a7b1a86fcf0e4db61716d05b4fbdf57e68be8d0052cf79d32a6c9

    • SHA512

      d02e2d46b8bfab8dc4b69a7420593904a27ab61d8adfc3fc4903cc4720ebca98b4491a27abf9236acc8821b17a2f6846005dcb91bacc1c530ed61dae4e21a5bf

    • SSDEEP

      1536:I/Lx7rI5r/9AmcN0Z9qlCv4kbMDYEsO9Mb+KR0Nc8QsJq39:a96/YN0ZZ4kkYMe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral10behavioral9

    • Target

      Dataset/payload_meterpreter_25.exe

    • Size

      72KB

    • MD5

      45a12a06600428b43a0ecefcc237633a

    • SHA1

      6245d3517a03bb1ee90da7f1283ea0a41566b354

    • SHA256

      bb7b088b60bb15f533ba8a8eb3a3a1110ff5f1010609ca659454f3c7e1bbfcf1

    • SHA512

      1920afd85174f80f9c6ae549342cf5817e55e70d1bdf8ce7cd89cf49b9400a644697543ab6719806796bfce0cbdca7c025ca9ab9342ba4d58ea74333a1f4d88c

    • SSDEEP

      1536:IcOjvpZzZgmL07Oe0i20jhYYe7KmpMb+KR0Nc8QsJq39:xKRZuMgIi20l4e0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral11behavioral12

    • Target

      Dataset/payload_meterpreter_26.exe

    • Size

      72KB

    • MD5

      4e18a38e8bf60b3432eef75ae580c5d6

    • SHA1

      5fa7cee5d85dfceed6f016de67cc9fb44ea94707

    • SHA256

      6564e53bbf3990a7598564edeb59c7a42ba740cd8c7e634f65c8b62905843835

    • SHA512

      d9ca30e9688147a338f4a839d50c813508f2d212663bfa584fd119f1526fd23f3b7490c26d55b0ead18c34815d1bc4f813c3f81288fc22f99f6b4c0a41d01a66

    • SSDEEP

      1536:Icuom+Ncws8Bw8hBNIhfae9dqBSso36krMb+KR0Nc8QsJq39:puaNc78hbY1qBLzkre0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral13behavioral14

    • Target

      Dataset/payload_meterpreter_27.exe

    • Size

      72KB

    • MD5

      a4f9f9431db9baf53de5b4c8bd2548fc

    • SHA1

      cbab6b352f9c4b8e8fdeac85cca4542701520df3

    • SHA256

      d797f2162c6e0b5165ce8f09795d425569fd82d66b84c8fd021a04b684fef42a

    • SHA512

      a699d4b8af309c6bcf3039ad957a2a2eba3d938b4fff71e0a59c04b9e3f7a5ff29c52e29514cc16d633c674087c58a6f03382b2e982cc6b9338db353e3996f2f

    • SSDEEP

      1536:IqnCUP1xXQhhfe4JHrtWJUotedv6gMb+KR0Nc8QsJq39:HCUP1STTomowoge0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral15behavioral16

    • Target

      Dataset/payload_meterpreter_28.exe

    • Size

      72KB

    • MD5

      394f74de7d05434e63a37911f8dac446

    • SHA1

      89f9f7cb879cd0869a5af73b2624dfbe8ef3ac2c

    • SHA256

      1db6f7b39538402d61b179742c85240cbc7f2a7bfd0572abd35892f18acd8cbe

    • SHA512

      d5e454e096cdc5becda5e9d0fc6144aaedc52fec3111829bce8ca9a346f1bb396800d2e9579dd5f96f7e0550351563d788ed40b6262e273c8acac663cc5dd1f6

    • SSDEEP

      1536:IanBgroMpPtwDU/5Q82T36Mb+KR0Nc8QsJq39:Ngrl5twDUQKe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral17behavioral18

    • Target

      Dataset/payload_meterpreter_29.exe

    • Size

      72KB

    • MD5

      a415fa89b61f80d6fcb580a38fa3f8da

    • SHA1

      2624152c2e1983afa88c41107c61d1cd6c80324e

    • SHA256

      e6110c7912b562103edfc57b04a10c32963d2c9cef325688209720e560b03661

    • SHA512

      1c476c553b50df9c6cfe5b7f832aa547779d6ecf56556e350f02f9daab6cfb86660be7a5e97faa8151b7d1ecc4bfa3e354f4ddcb6099c9b43f05c0551d325cc4

    • SSDEEP

      1536:IjB9i0ZMxL+wwJl4r+jcLZTuvzkoLZAXikMb+KR0Nc8QsJq39:aeIUwX4Hx0xANe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral19behavioral20

    • Target

      Dataset/payload_meterpreter_34.exe

    • Size

      72KB

    • MD5

      32f9c3a065a1cf0e8b4c7fbc9cf9fcb2

    • SHA1

      6154702290dfdcd18d90e4141b57ea5e9da7ff10

    • SHA256

      1a6aa57f80485d4307cdd983670239901b0924a2b905e41afa662c9b03936772

    • SHA512

      c0f48b2718f92b465363845511db7afca420551a738fda14ea97c0ff668cf93348d66acf4fa5b93e8c80771044318a94ef172528ceef9cac0bc4a2bf2dd34ba3

    • SSDEEP

      1536:IpAu6/k9i5DG/CkKHW3N3LbkMb+KR0Nc8QsJq39:zco5DGPbge0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral21behavioral22

    • Target

      Dataset/payload_meterpreter_35.exe

    • Size

      72KB

    • MD5

      d9b7c618f56176416515bbad71e04af5

    • SHA1

      e4687a07eca4bc5c62100126c3064cbc5dd7d612

    • SHA256

      5e942949b9299685b315c1532115fd1b16023de6a01866387909be7553384c5f

    • SHA512

      cad853bdb77a10b088247ed3b1bccd06b9d8281d5ef152195ff264f1466b80db36e377259d3825b6fea65d0e1258976752fe91bc4fd39b4f4b6b75e12cd07fb5

    • SSDEEP

      1536:IwJf7Mky9cAl/oeCGsakUaVtO4O6Mb+KR0Nc8QsJq39:NfmmAaextaVt7le0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral23behavioral24

    • Target

      Dataset/payload_meterpreter_39.exe

    • Size

      72KB

    • MD5

      ad14c89708166360cc180ad390bf91cb

    • SHA1

      969b002f43ec61e1a1ca3b503b4ddef1b7d4589c

    • SHA256

      6739619390ca9dd9369d78747296602ff68ba8b518a2aa9ab5a0366a469a9220

    • SHA512

      52cca854fabbdba2868efb3ff4abc3eea880c228e87c67384870ebab3a3e7a9f7b3a2b3d77c4c8d71e08a1907cbc86989cc5fcde29d42c932d101e7be5961025

    • SSDEEP

      1536:IZd6jzIQFCTuEik+u2zHOD4Mb+KR0Nc8QsJq39:G6PFbEr+u2le0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral25behavioral26

    • Target

      Dataset/payload_meterpreter_4.exe

    • Size

      72KB

    • MD5

      687864574ad303fc0de80a0cf6387cc3

    • SHA1

      285fac9c093c4cc890a4e0ced00574d52f31fe66

    • SHA256

      4ec216d96ae88f691110d9c42f798005d35e5fa0dc596a50f3c7ed54c389aa1b

    • SHA512

      e75e86ec64b2af2460c367e0cbd2ce03d5483e6e2907e8fd60e5c722649f7ede5ad95c07bd8c9758bc490ca3e4511317f753844e2c7096d403f6755d2032b40b

    • SSDEEP

      1536:IRt87wbcWnRSPjv9fKeA4zX/6lMb+KR0Nc8QsJq39:qWhWnRSPjvfue0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral27behavioral28

    • Target

      Dataset/payload_meterpreter_40.exe

    • Size

      72KB

    • MD5

      4b9ba53e51413ae751dfaca01171e571

    • SHA1

      27687e01f57170d24feef406efadaa16e748f5d7

    • SHA256

      1e5cdf8769249f84fe0921babc41bbd01f46ae35e548edc491a5f0779da5a878

    • SHA512

      eb5a1483a35e3f8c3496aa01817b5e0f2fb1f2d934bfd48e2edd48b60d278ba94a27750e768a994a34b4d8f197d60efe41dad58b9faa0054ac3804763168f577

    • SSDEEP

      1536:I9jySIwdQk+y+In9pd2T+54xke/D3xvMb+KR0Nc8QsJq39:AjySV13dwDBve0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral29behavioral30

    • Target

      Dataset/payload_meterpreter_41.exe

    • Size

      72KB

    • MD5

      7742d06875968d305903067f7f828474

    • SHA1

      a0c42885be41fbff4fe1c074517a0caacca0800e

    • SHA256

      15d3bebd8a44caf765af17dd64c53a38fe675a46ffe0a4305809fda8d7f7641a

    • SHA512

      6849a8a4d7db3dbb6b268e4dc23d3d1eaa755ff7702beb2da7ffc8069b62a5346f8b7dc56bf5ffb2541babc0c2df33a6e02093beae953a1ec0a3760fc1b9f49e

    • SSDEEP

      1536:IZ7OeRKSyUCc2KB8PX77KOdMb+KR0Nc8QsJq39:c7oSyUuzPXnKOde0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks

static1

metasploit
Score
10/10

behavioral1

metasploitbackdoortrojan
Score
10/10

behavioral2

metasploitbackdoortrojan
Score
10/10

behavioral3

metasploitbackdoortrojan
Score
10/10

behavioral4

metasploitbackdoortrojan
Score
10/10

behavioral5

metasploitbackdoortrojan
Score
10/10

behavioral6

metasploitbackdoortrojan
Score
10/10

behavioral7

metasploitbackdoortrojan
Score
10/10

behavioral8

metasploitbackdoortrojan
Score
10/10

behavioral9

metasploitbackdoortrojan
Score
10/10

behavioral10

metasploitbackdoortrojan
Score
10/10

behavioral11

metasploitbackdoortrojan
Score
10/10

behavioral12

metasploitbackdoortrojan
Score
10/10

behavioral13

metasploitbackdoortrojan
Score
10/10

behavioral14

metasploitbackdoortrojan
Score
10/10

behavioral15

metasploitbackdoortrojan
Score
10/10

behavioral16

metasploitbackdoortrojan
Score
10/10

behavioral17

metasploitbackdoortrojan
Score
10/10

behavioral18

metasploitbackdoortrojan
Score
10/10

behavioral19

metasploitbackdoortrojan
Score
10/10

behavioral20

metasploitbackdoortrojan
Score
10/10

behavioral21

metasploitbackdoortrojan
Score
10/10

behavioral22

metasploitbackdoortrojan
Score
10/10

behavioral23

metasploitbackdoortrojan
Score
10/10

behavioral24

metasploitbackdoortrojan
Score
10/10

behavioral25

metasploitbackdoortrojan
Score
10/10

behavioral26

metasploitbackdoortrojan
Score
10/10

behavioral27

metasploitbackdoortrojan
Score
10/10

behavioral28

metasploitbackdoortrojan
Score
10/10

behavioral29

metasploitbackdoortrojan
Score
10/10

behavioral30

metasploitbackdoortrojan
Score
10/10

behavioral31

metasploitbackdoortrojan
Score
10/10

behavioral32

metasploitbackdoortrojan
Score
10/10