Overview

overview

10

Static

static

10

43f616be85...63.exe

windows7-x64

10

43f616be85...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43f616be85946ac201da633eb44a73a37e6b6da5ea21f07ff19b264e7a2a7a63

  • Size

    1.3MB

  • Sample

    240420-ncakqafb87

  • MD5

    6657e6d29e94ba2a5fb9d1824f34acd1

  • SHA1

    361b3e877938adca96ba5ab401983f490bf021c3

  • SHA256

    43f616be85946ac201da633eb44a73a37e6b6da5ea21f07ff19b264e7a2a7a63

  • SHA512

    400e371b28abd421496315fef00ce905da9ecad04eed7e7d4fc07ef60a7113d8b8994fc1f335525d807f6aa36263cb28b6e6242f3511150698c809d6d283cac4

  • SSDEEP

    24576:wvkWcVkyEq9DRho1jFP8ltPP01Ws7+wFPEl9ix4fpUzoQDt+egElxdqFWVCGC:wcWcCyEq9DRho/ctH01Ws74rA4RUBDHo

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.143:4443

Targets

    • Target

      43f616be85946ac201da633eb44a73a37e6b6da5ea21f07ff19b264e7a2a7a63

    • Size

      1.3MB

    • MD5

      6657e6d29e94ba2a5fb9d1824f34acd1

    • SHA1

      361b3e877938adca96ba5ab401983f490bf021c3

    • SHA256

      43f616be85946ac201da633eb44a73a37e6b6da5ea21f07ff19b264e7a2a7a63

    • SHA512

      400e371b28abd421496315fef00ce905da9ecad04eed7e7d4fc07ef60a7113d8b8994fc1f335525d807f6aa36263cb28b6e6242f3511150698c809d6d283cac4

    • SSDEEP

      24576:wvkWcVkyEq9DRho1jFP8ltPP01Ws7+wFPEl9ix4fpUzoQDt+egElxdqFWVCGC:wcWcCyEq9DRho/ctH01Ws74rA4RUBDHo

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks