Overview

overview

10

Static

static

10

tcp.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tcp.exe

  • Size

    72KB

  • Sample

    240606-h27c4abb7v

  • MD5

    42e72e56aaf02a6b80948dd4492df5b4

  • SHA1

    c09bb4262a2d0609ca3998782f73fe8c5990f15a

  • SHA256

    c2b27a51b531606d6b5be39c5a6cee16f1d16fe60288eb2f578a72e5789aa456

  • SHA512

    aabac17a6e6c0635983ad87f5f708444d954620ffb06bf902b0e903e6e4a3e18677547ce472b3f400ea3d7e5e837f372ae270eab811336b1c710b17471685caa

  • SSDEEP

    1536:IjoNVb4rgMeqzgvvDtT1LnjXk942YIyMb+KR0Nc8QsJq39:ooNF4rveqz4x5LjUfYVe0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.125.223.134:19368

Targets

    • Target

      tcp.exe

    • Size

      72KB

    • MD5

      42e72e56aaf02a6b80948dd4492df5b4

    • SHA1

      c09bb4262a2d0609ca3998782f73fe8c5990f15a

    • SHA256

      c2b27a51b531606d6b5be39c5a6cee16f1d16fe60288eb2f578a72e5789aa456

    • SHA512

      aabac17a6e6c0635983ad87f5f708444d954620ffb06bf902b0e903e6e4a3e18677547ce472b3f400ea3d7e5e837f372ae270eab811336b1c710b17471685caa

    • SSDEEP

      1536:IjoNVb4rgMeqzgvvDtT1LnjXk942YIyMb+KR0Nc8QsJq39:ooNF4rveqz4x5LjUfYVe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1

MITRE ATT&CK Matrix

Tasks