Overview

overview

10

Static

static

10

shell.exe

windows7-x64

10

shell.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    shell.exe

  • Size

    7KB

  • Sample

    240429-lqgj3sfe73

  • MD5

    cefbc5edf38e8931573d308072d0ce74

  • SHA1

    9d0c8df5650b068e52d5b4eabb094f6592347bce

  • SHA256

    1b8afa03a50f672c497dbe219a72dab12693caecb5b08e39ee8c98819e08ce67

  • SHA512

    218db5003d9285221f0c71ba1f16fd70102acaeb04729c028ebf59120836fa88a4fe691aa2f6208ef889be43503fb0b326ded7bc95295365c2316e37b636ce7f

  • SSDEEP

    24:eFGStrJ9u0/656nZdkBQAVv1OxyKZqGeNDMSCvOb4pmB:is0cykBQYgxykSD9C2HB

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.49.119:4443

Targets

    • Target

      shell.exe

    • Size

      7KB

    • MD5

      cefbc5edf38e8931573d308072d0ce74

    • SHA1

      9d0c8df5650b068e52d5b4eabb094f6592347bce

    • SHA256

      1b8afa03a50f672c497dbe219a72dab12693caecb5b08e39ee8c98819e08ce67

    • SHA512

      218db5003d9285221f0c71ba1f16fd70102acaeb04729c028ebf59120836fa88a4fe691aa2f6208ef889be43503fb0b326ded7bc95295365c2316e37b636ce7f

    • SSDEEP

      24:eFGStrJ9u0/656nZdkBQAVv1OxyKZqGeNDMSCvOb4pmB:is0cykBQYgxykSD9C2HB

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks