Overview

overview

10

Static

static

10

PQR3-PDF.exe

windows7-x64

10

PQR3-PDF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PQR3-PDF.exe

  • Size

    72KB

  • Sample

    240418-lpb8zahd45

  • MD5

    07f8747a9d428fba403b396a74acf677

  • SHA1

    7fc3710e361f44d2afc9ae1f88888511a409d471

  • SHA256

    d115ddd1de66d1d220ae9c1cff580c507e56bab234fc19326727f28b6503f613

  • SHA512

    08ac2133c8fdc4edb6f85be8fd11f067aed2d88a009ef2f1fdc066cdef0b7597cc7fb44ed8f0ee1bd9e17156247e7164db1b852626b412e36b857e920163a34f

  • SSDEEP

    1536:IRfPco751wrWSQVINb4tvh9ij5AtMb+KR0Nc8QsJq39:Qf0W5qrWBWgvHijSe0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.84.34.113:443

Targets

    • Target

      PQR3-PDF.exe

    • Size

      72KB

    • MD5

      07f8747a9d428fba403b396a74acf677

    • SHA1

      7fc3710e361f44d2afc9ae1f88888511a409d471

    • SHA256

      d115ddd1de66d1d220ae9c1cff580c507e56bab234fc19326727f28b6503f613

    • SHA512

      08ac2133c8fdc4edb6f85be8fd11f067aed2d88a009ef2f1fdc066cdef0b7597cc7fb44ed8f0ee1bd9e17156247e7164db1b852626b412e36b857e920163a34f

    • SSDEEP

      1536:IRfPco751wrWSQVINb4tvh9ij5AtMb+KR0Nc8QsJq39:Qf0W5qrWBWgvHijSe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks