Overview

overview

10

Static

static

10

ab.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab.exe

  • Size

    72KB

  • Sample

    240604-vfknesdc9z

  • MD5

    306656615fbaaefec706ad27a5971882

  • SHA1

    ba1a86d1d2370ddceaebf5856c3b2d0499a75f4a

  • SHA256

    6b634e803e194a281a077dc2c83feba5160d1f640486861e23596b9fe886c54f

  • SHA512

    05f7ebd463de976dee2674d2cd5e955d1386153cd31efcb7257819dc7e2683b02b76090c4e54d0187b406febb3b60b7b11ca159052b8c5b3d755c18c3d83c33c

  • SSDEEP

    1536:IvbZlls8zTanmGH63yxvNn5kfqZwoMb+KR0Nc8QsJq39:gZllHzTCA453Zwoe0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

134.213.29.14:4444

Targets

    • Target

      ab.exe

    • Size

      72KB

    • MD5

      306656615fbaaefec706ad27a5971882

    • SHA1

      ba1a86d1d2370ddceaebf5856c3b2d0499a75f4a

    • SHA256

      6b634e803e194a281a077dc2c83feba5160d1f640486861e23596b9fe886c54f

    • SHA512

      05f7ebd463de976dee2674d2cd5e955d1386153cd31efcb7257819dc7e2683b02b76090c4e54d0187b406febb3b60b7b11ca159052b8c5b3d755c18c3d83c33c

    • SSDEEP

      1536:IvbZlls8zTanmGH63yxvNn5kfqZwoMb+KR0Nc8QsJq39:gZllHzTCA453Zwoe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1

MITRE ATT&CK Matrix

Tasks