Overview

overview

10

Static

static

10

payload.exe

windows7-x64

10

payload.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    payload.exe

  • Size

    7KB

  • Sample

    240429-2gy1rsdc8w

  • MD5

    f6479b6c8c2dab73ca04c773185140cd

  • SHA1

    c6565f56059f103eca453ff23e5310b21a4e6f1e

  • SHA256

    df09755e892dd63ba6493864fc2a4d4add282c44f3872e15b17e2604c450ff66

  • SHA512

    03873a643dd1a0f1e76fa66b170f864e818ff2193574105a540eec5db86c11077919f84b90ecf41384c830e4130d1842c14d26e334bccee4c0b1e562cbb59b63

  • SSDEEP

    24:eFGStrJ9u0/6TanZdkBQAVb6WY+4wKZqHeNDMSCvOXpmB:is0KSkBQai+4wlSD9C2kB

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.88.128:444

Targets

    • Target

      payload.exe

    • Size

      7KB

    • MD5

      f6479b6c8c2dab73ca04c773185140cd

    • SHA1

      c6565f56059f103eca453ff23e5310b21a4e6f1e

    • SHA256

      df09755e892dd63ba6493864fc2a4d4add282c44f3872e15b17e2604c450ff66

    • SHA512

      03873a643dd1a0f1e76fa66b170f864e818ff2193574105a540eec5db86c11077919f84b90ecf41384c830e4130d1842c14d26e334bccee4c0b1e562cbb59b63

    • SSDEEP

      24:eFGStrJ9u0/6TanZdkBQAVb6WY+4wKZqHeNDMSCvOXpmB:is0KSkBQai+4wlSD9C2kB

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks