Overview

overview

10

Static

static

10

fd489fdb8c...64.exe

windows7-x64

10

fd489fdb8c...64.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd489fdb8c39f3a4f6c3ea940a94f27b8ea0af92bb9fa95aa9dc6215e552b764

  • Size

    40KB

  • Sample

    240913-y642jaxepg

  • MD5

    e57b94ed1947884a88b9f09af38d5b82

  • SHA1

    e2d3386e3918e3d94acde1aa4c7217d6a06418c3

  • SHA256

    fd489fdb8c39f3a4f6c3ea940a94f27b8ea0af92bb9fa95aa9dc6215e552b764

  • SHA512

    235d41b40c47e0324f6f441d613b8b79fb38df0efc99eaad2320acae10213163e2c574a06836b434be50ba2d42c193d2c7953e29aa7c01b2f20c53bfb09b8e99

  • SSDEEP

    384:3lwl9K3RZx+50RCsq7mkqZmAYHfbMkwPhd5gJzJQBBD2l7JU:3lw/+RZMCRCsq7q0nothXgRSBBD2U

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.3.7:83/o3lN

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASP)

Targets

    • Target

      fd489fdb8c39f3a4f6c3ea940a94f27b8ea0af92bb9fa95aa9dc6215e552b764

    • Size

      40KB

    • MD5

      e57b94ed1947884a88b9f09af38d5b82

    • SHA1

      e2d3386e3918e3d94acde1aa4c7217d6a06418c3

    • SHA256

      fd489fdb8c39f3a4f6c3ea940a94f27b8ea0af92bb9fa95aa9dc6215e552b764

    • SHA512

      235d41b40c47e0324f6f441d613b8b79fb38df0efc99eaad2320acae10213163e2c574a06836b434be50ba2d42c193d2c7953e29aa7c01b2f20c53bfb09b8e99

    • SSDEEP

      384:3lwl9K3RZx+50RCsq7mkqZmAYHfbMkwPhd5gJzJQBBD2l7JU:3lw/+RZMCRCsq7q0nothXgRSBBD2U

    Score
    10/10
    metasploitbackdoortrojandiscovery

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks