Overview

overview

10

Static

static

10

7zd.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7zd.exe

  • Size

    72KB

  • Sample

    240419-k816rsde76

  • MD5

    71cd1dc1018afeb751c745566665967b

  • SHA1

    2ef8373b089990691c50b3d8cb976c6b33c72376

  • SHA256

    f433151fabdf7257350c4ee09ce803c9b6efe973477c83f8f9bf69287e544b96

  • SHA512

    0f7ae3f8699102f18f79181edb6ec2ea620776a2978d4b23be35568b63e5fa298ffdbb593b0fa49f642cd4c8bae48ff414d6908fdca2f35be06c4f6ec6ce8c21

  • SSDEEP

    1536:IrlUt6DTm8Fp6oE8N1QccMb+KR0Nc8QsJq39:3+TmDT8fQcce0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.31.11:4444

Targets

    • Target

      7zd.exe

    • Size

      72KB

    • MD5

      71cd1dc1018afeb751c745566665967b

    • SHA1

      2ef8373b089990691c50b3d8cb976c6b33c72376

    • SHA256

      f433151fabdf7257350c4ee09ce803c9b6efe973477c83f8f9bf69287e544b96

    • SHA512

      0f7ae3f8699102f18f79181edb6ec2ea620776a2978d4b23be35568b63e5fa298ffdbb593b0fa49f642cd4c8bae48ff414d6908fdca2f35be06c4f6ec6ce8c21

    • SSDEEP

      1536:IrlUt6DTm8Fp6oE8N1QccMb+KR0Nc8QsJq39:3+TmDT8fQcce0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1

MITRE ATT&CK Matrix

Tasks