Overview

overview

10

Static

static

10

2c647c4742...5b.exe

windows7-x64

10

2c647c4742...5b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c647c4742e27b3737eb51c6c82430d92ed6161dcd6703e87d7dd49109b7355b

  • Size

    704KB

  • Sample

    240417-xvb1yabc38

  • MD5

    3b4ab5a076808790010327773d071e25

  • SHA1

    dce3d11427e6dc4dd1ae3c5c60ab3ad9e1800712

  • SHA256

    2c647c4742e27b3737eb51c6c82430d92ed6161dcd6703e87d7dd49109b7355b

  • SHA512

    af672cd393726720bba4c63a418b2e0d44b612bc82ace1b738b19136831abcd6b3ce2fbd6e9333a231ce5cc5217c4ed6d4188373acbae5a5e871e400c2644c93

  • SSDEEP

    12288:9R4RLJoKkJwRLab2xatbs1y63MZDbgi7xsK4Rwl:9R4RLJ5IcLM2Etbv4eDbldsKywl

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

152.136.174.227:111

Targets

    • Target

      2c647c4742e27b3737eb51c6c82430d92ed6161dcd6703e87d7dd49109b7355b

    • Size

      704KB

    • MD5

      3b4ab5a076808790010327773d071e25

    • SHA1

      dce3d11427e6dc4dd1ae3c5c60ab3ad9e1800712

    • SHA256

      2c647c4742e27b3737eb51c6c82430d92ed6161dcd6703e87d7dd49109b7355b

    • SHA512

      af672cd393726720bba4c63a418b2e0d44b612bc82ace1b738b19136831abcd6b3ce2fbd6e9333a231ce5cc5217c4ed6d4188373acbae5a5e871e400c2644c93

    • SSDEEP

      12288:9R4RLJoKkJwRLab2xatbs1y63MZDbgi7xsK4Rwl:9R4RLJ5IcLM2Etbv4eDbldsKywl

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks