Overview

overview

10

Static

static

3

level0.exe

windows7-x64

10

level0.exe

windows10-2004-x64

10

level1.exe

windows7-x64

1

level1.exe

windows10-2004-x64

10

level2.exe

windows7-x64

1

level2.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    level1-.zip

  • Size

    10.4MB

  • Sample

    240516-rd746agd89

  • MD5

    6ddae2ef67dc20ff027638dd8521f295

  • SHA1

    0044a6f9932216d8a8830c993696852ec5e1694d

  • SHA256

    7f5b8433af510730ded102d29e7ccd1c715d76b7532fdd063c6273765e511e3b

  • SHA512

    8e54d7b638c3ef84b7f5d4edad6873bd27012e6588923cde60f8c789312705100f6a4d78e508767872139eb25a814ac3cd2cd5f6fcc3ebfc4b8df121dadf38e5

  • SSDEEP

    196608:rTXiLeBxnM6nzxO4bu+AoJMDfKvLZIBztmBAqTI8A0eDj:PXiCBRHzxOX+AIY2tS6IzDj

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.122.1:31337

Targets

    • Target

      level0.exe

    • Size

      12.2MB

    • MD5

      f9f0a80d33560d81f5d26938d1571e52

    • SHA1

      d493ad026b8ad0b11822acd807ed8b4471af712c

    • SHA256

      24a73f79cd0dc350f85c9f11a0ce6b97963b3f7191c09e29959f08819140caef

    • SHA512

      7a4be5d34ada64955d5cc9c5a13fd614860bb23e657180f239df4400a8cabd254b2afb58d4945c041192f118fcaef3582c17689133a57554eb73461fa34d18c3

    • SSDEEP

      196608:xwdXfHnmfdf0r/acj5a6m9oZOujWBLKOiGaz33:WdPGfdf0vHZOujgobzH

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

    • Target

      level1.exe

    • Size

      12.2MB

    • MD5

      cf080f8347a0fce496dacf25583d9644

    • SHA1

      90f91dd3df40c05701495b241a25959d4283ead7

    • SHA256

      4aabb2ae5e3de665b6f054c87a69f23a2ac90e97e5d213fec960e65c59390b33

    • SHA512

      97bb5a4f22635e6a1f1f83cc7ae02791ef07354221f85ec774b5e645c7ae2c5bb71a00efeb4eb59c45aff4de5ff51da7f78d7b32af14a117d265f6aabd6351be

    • SSDEEP

      196608:4otLxynW9jf0Bhrsq5O6Yfy6TSDJWBRwtrG2oc:BtNh9jf0sJyYSDJaeVn

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral3behavioral4

    • Target

      level2.exe

    • Size

      12.2MB

    • MD5

      73508f1e030a966fea155667a2158722

    • SHA1

      52fcc36217220c59239030ec721a3c76221204f3

    • SHA256

      41b604d8fd3c94bb73ebfd665d70afe4eef7d590effd86446d58f5542b8d1804

    • SHA512

      d973135eb428a525147fb7cd41d6f029e38c36987d5de1ed9b6f5dd9057e8ba383f63ccb685256e887b77c40403f7150b1a6eac8cbdd644001a21e0daa4f4915

    • SSDEEP

      196608:duAhmY7UnplPf0Mw8NG5x6LQvdKFMBNznZGaPr:QAkyMlPf0WmdKFc1Bj

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Matrix

Tasks