Overview

overview

10

Static

static

10

8b32a6092f...90.exe

windows7-x64

10

8b32a6092f...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090

  • Size

    72KB

  • Sample

    240506-aqjtnadg83

  • MD5

    997ba37fac53e2a554391f522cfbb686

  • SHA1

    33898e4c66d4865ab44ce76316755415728f1ca4

  • SHA256

    8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090

  • SHA512

    ae49eb1682030c2d9ccf4523f4d46177b693928fc11e3550404d38b90e2d6cc6f4dcb931a1953ba8921ed38099b6d1f004c45febaa2d6a276f980caf5e8b8850

  • SSDEEP

    1536:IgW8zis9JdneftTv59qu3udkJVyMb+KR0Nc8QsJq39:lWwKVTTqgJYe0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

120.206.61.126:39988

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090

    • Size

      72KB

    • MD5

      997ba37fac53e2a554391f522cfbb686

    • SHA1

      33898e4c66d4865ab44ce76316755415728f1ca4

    • SHA256

      8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090

    • SHA512

      ae49eb1682030c2d9ccf4523f4d46177b693928fc11e3550404d38b90e2d6cc6f4dcb931a1953ba8921ed38099b6d1f004c45febaa2d6a276f980caf5e8b8850

    • SSDEEP

      1536:IgW8zis9JdneftTv59qu3udkJVyMb+KR0Nc8QsJq39:lWwKVTTqgJYe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks