Overview

overview

10

Static

static

3

a4d3cafbeb...3e.exe

windows7-x64

10

a4d3cafbeb...3e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4d3cafbebcae8e36642224cc1df9845e1c7faf1858faea7037b2d969b57bf3e

  • Size

    14KB

  • Sample

    240526-1thnwadd6v

  • MD5

    c4d8050732c94ff27da133ff25c7b5ed

  • SHA1

    c7cae371be6de609e9cad803cd937d725e768100

  • SHA256

    a4d3cafbebcae8e36642224cc1df9845e1c7faf1858faea7037b2d969b57bf3e

  • SHA512

    7fbbab74c4e2aa76ca58382cdcdc0df43b1d59077109324651e1d5b5e156c6a3bd81a0a18ca7a612452bd3bb241cb8ce7430cb144a6e192bb58df760702a0b08

  • SSDEEP

    192:W3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOsZpzyejDMN1:1MCfrfQ6tBSIuXueUN1

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.1.134:80/sHi8

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; UHS)

Targets

    • Target

      a4d3cafbebcae8e36642224cc1df9845e1c7faf1858faea7037b2d969b57bf3e

    • Size

      14KB

    • MD5

      c4d8050732c94ff27da133ff25c7b5ed

    • SHA1

      c7cae371be6de609e9cad803cd937d725e768100

    • SHA256

      a4d3cafbebcae8e36642224cc1df9845e1c7faf1858faea7037b2d969b57bf3e

    • SHA512

      7fbbab74c4e2aa76ca58382cdcdc0df43b1d59077109324651e1d5b5e156c6a3bd81a0a18ca7a612452bd3bb241cb8ce7430cb144a6e192bb58df760702a0b08

    • SSDEEP

      192:W3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOsZpzyejDMN1:1MCfrfQ6tBSIuXueUN1

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks