Overview

overview

10

Static

static

3

9ea77758b5...a6.exe

windows7-x64

10

9ea77758b5...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ea77758b50e279cd51806cefc93695a33d73d60209167cb6f042a89411209a6

  • Size

    14KB

  • Sample

    240528-r8yh7saf24

  • MD5

    b4c263e41de17711dff20638b2d02ce2

  • SHA1

    007fda186a22401d2f2eb4437f3e36e839233a3c

  • SHA256

    9ea77758b50e279cd51806cefc93695a33d73d60209167cb6f042a89411209a6

  • SHA512

    16c51c2ad50fff65e9bc3ac276ba37b2f3c4a6d46ac1943c0adde55f646ce67353eb9b3688e18be4ac911fb6d17ef96eb7cbe9f7697f10ca7ca9d1a4fcbcf6e4

  • SSDEEP

    192:Z3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOH3tofHlejDMN1:gMCfrfQ6tBSIZ9ofFeUN1

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.1.108:8011/K3pn

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; BOIE9;ENUS)

Targets

    • Target

      9ea77758b50e279cd51806cefc93695a33d73d60209167cb6f042a89411209a6

    • Size

      14KB

    • MD5

      b4c263e41de17711dff20638b2d02ce2

    • SHA1

      007fda186a22401d2f2eb4437f3e36e839233a3c

    • SHA256

      9ea77758b50e279cd51806cefc93695a33d73d60209167cb6f042a89411209a6

    • SHA512

      16c51c2ad50fff65e9bc3ac276ba37b2f3c4a6d46ac1943c0adde55f646ce67353eb9b3688e18be4ac911fb6d17ef96eb7cbe9f7697f10ca7ca9d1a4fcbcf6e4

    • SSDEEP

      192:Z3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOH3tofHlejDMN1:gMCfrfQ6tBSIZ9ofFeUN1

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks