Overview

overview

10

Static

static

10

308a0f3257...5c.exe

windows7-x64

10

308a0f3257...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    308a0f3257bf6ad05f5207594b0261c39f61c57066d2be0c29398e2156758c5c

  • Size

    4.2MB

  • Sample

    240519-rnxfeabd76

  • MD5

    c675dc6b639e1a3d7e2f3a694c486a5f

  • SHA1

    944ffd88a42adab46743899233741e7feedd0d00

  • SHA256

    308a0f3257bf6ad05f5207594b0261c39f61c57066d2be0c29398e2156758c5c

  • SHA512

    0bdb20eb207b76f800e52512097558608d109c76f2ca93489bee2366b9be5bc2297d8a51ea849abd16da137ec6e7349b90d63cae0b33516f720a429453a58c2c

  • SSDEEP

    98304:cb3UWflOTIqC3ySgD2fG2+MdcFfHZK2GKfezy+abyUl1OkmIospc:kNIcqCCBDATofM2Dmu+aXl1lmEc

Score
10/10
metasploitbackdoortrojanupx

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.17.158:9000

Targets

    • Target

      308a0f3257bf6ad05f5207594b0261c39f61c57066d2be0c29398e2156758c5c

    • Size

      4.2MB

    • MD5

      c675dc6b639e1a3d7e2f3a694c486a5f

    • SHA1

      944ffd88a42adab46743899233741e7feedd0d00

    • SHA256

      308a0f3257bf6ad05f5207594b0261c39f61c57066d2be0c29398e2156758c5c

    • SHA512

      0bdb20eb207b76f800e52512097558608d109c76f2ca93489bee2366b9be5bc2297d8a51ea849abd16da137ec6e7349b90d63cae0b33516f720a429453a58c2c

    • SSDEEP

      98304:cb3UWflOTIqC3ySgD2fG2+MdcFfHZK2GKfezy+abyUl1OkmIospc:kNIcqCCBDATofM2Dmu+aXl1lmEc

    Score
    10/10
    metasploitbackdoortrojanupx

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks