Extracted

• • Target
    Merchant Canceller 1.0/Injector.exe
  • Size 122KB
  • SHA256 584445127be636d382ba893af6e2acc2bd53182bbfcc6a8e0488ebeffdace632
  • MD5 7cf358b3df6f2b378fe6bddcae44a930
  • SHA1 a53f211f9a80b1956fa28c995ba1b99be856fc22
  • SHA512 919e776a2bdcc2ec68bb8ab6f9be3997c6386361bc882093594acec5fdf7519252651a4f47ec41e1bf53ac376e720eb44a66fe6a3e3a967519d6b244236a1f87
  • SSDEEP 1536:IFtvhucEboSMXUudS5gcTejoMb+KR0Nc8Qs1UY1EjzJYWDVZaoq3XEl:6tv9EboDbqgye8e0Nc8QsoY6aNUl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  metasploitbackdoortrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit
  behavioral1behavioral2
• • Target
    Merchant Canceller 1.0/Merchantinator.dll
  • Size 48KB
  • SHA256 2c77a840143b3642da28d3eb1d34c631e674475ef6ce775668f94ee06c8526f9
  • MD5 4ebb47d2d60c6fd3e9b324e1a3a9aee9
  • SHA1 0bdf4cf785b9396f864eb321f219b0b0726f3856
  • SHA512 f001b39e1983f2137b92695df49bf52141b94600309409beee6b73c76a09d13125c4cb233456fee4f1cdc76adf071fdbe24cf8efb1a5f4387cb373fffa05e9e8
  • SSDEEP 768:dggXIpl73v1ny+5AuGQmqaEstl2TLJAKGefmwsdhRlyQDuzJvOZn+2D:aN73vhjAuUqaWLuKGefmwsdhJuxOZtD
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral3behavioral4
• • Target
    Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Injector.exe
  • Size 296KB
  • SHA256 c2cb507d86f3803bb2d7d5d72e5a0c50409b1e936ad158c70f36ad14522b82bf
  • MD5 844d0b343bca1e3490d8e4b754056d7e
  • SHA1 8cc2508831f4ed4dc26829adcfd6ffe49eb4bd84
  • SHA512 bc68cacd592055521fd314c9f3643c3c8503d3bdafa3ca6e1b096f45de0f8c8fa29b03a4e44591caf1efd76426edb05fc3dcbb70f16786e94398db8fd97d1054
  • SSDEEP 6144:Vkt82J7rPs+Nq1bUkziu1n9fcg6wvP6bQ7yMP+DE827fg4ZiP1v/:VU82J7rE+NaQkz7x9fcg76b7MP+Dd2sV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  6^/10

  bootkitpersistence

  • Writes to the Master Boot Record (MBR)

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  behavioral5behavioral6
• • Target
    Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Merchantinator.dll
  • Size 48KB
  • SHA256 2c77a840143b3642da28d3eb1d34c631e674475ef6ce775668f94ee06c8526f9
  • MD5 4ebb47d2d60c6fd3e9b324e1a3a9aee9
  • SHA1 0bdf4cf785b9396f864eb321f219b0b0726f3856
  • SHA512 f001b39e1983f2137b92695df49bf52141b94600309409beee6b73c76a09d13125c4cb233456fee4f1cdc76adf071fdbe24cf8efb1a5f4387cb373fffa05e9e8
  • SSDEEP 768:dggXIpl73v1ny+5AuGQmqaEstl2TLJAKGefmwsdhRlyQDuzJvOZn+2D:aN73vhjAuUqaWLuKGefmwsdhJuxOZtD
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral7behavioral8