Overview

overview

10

Static

static

10

nothingtoseehere.exe

windows7-x64

10

nothingtoseehere.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    nothingtoseehere.exe

  • Size

    72KB

  • Sample

    240517-cs17tsda5s

  • MD5

    883b42bdb6847931b31aa465d0149635

  • SHA1

    f6a8af6b1c498d19cccc7e2fe535d69ae81267c3

  • SHA256

    07e19ef7c68d476ffdb47c77c236fc08eaacbe58aa51d8da417f14563a8e255c

  • SHA512

    704351334493e88bf65f2f7ffd9c3f0590499182e7f2bbf557ea4c5130dd9e457999074d2a300fe7f5e09df81fa6f084577be4f12499f35b27474ee36f93b121

  • SSDEEP

    1536:I20I2yXSDTVGDbgP4f0PWaKsEMb+KR0Nc8QsJq39:jlXSDTVDP+FaKsEe0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.44.55:4455

Targets

    • Target

      nothingtoseehere.exe

    • Size

      72KB

    • MD5

      883b42bdb6847931b31aa465d0149635

    • SHA1

      f6a8af6b1c498d19cccc7e2fe535d69ae81267c3

    • SHA256

      07e19ef7c68d476ffdb47c77c236fc08eaacbe58aa51d8da417f14563a8e255c

    • SHA512

      704351334493e88bf65f2f7ffd9c3f0590499182e7f2bbf557ea4c5130dd9e457999074d2a300fe7f5e09df81fa6f084577be4f12499f35b27474ee36f93b121

    • SSDEEP

      1536:I20I2yXSDTVGDbgP4f0PWaKsEMb+KR0Nc8QsJq39:jlXSDTVDP+FaKsEe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks