Overview

overview

10

Static

static

10

5535e5975c...bd.exe

windows7-x64

10

5535e5975c...bd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5535e5975ce189801d2ef6e7825f0e6869d26d6e56660c4342c5ca8c6a329dbd

  • Size

    81KB

  • Sample

    240913-zajamaxgrc

  • MD5

    f5f5ac8de65eb39393d5edcfab2cb276

  • SHA1

    cb16d09fbf8694939665b359a7e25c66de60ad92

  • SHA256

    5535e5975ce189801d2ef6e7825f0e6869d26d6e56660c4342c5ca8c6a329dbd

  • SHA512

    2baeb35b3546d55b98ac8a4cb265892e07a0548b605b43e434e74268b8dd7f903d7471325d50dfaa2a337fa9fb56eeee4f50861b35be1832254309c8336332e7

  • SSDEEP

    1536:bpOxH/IMrqOgU/Qa42rjDyV+gKnkl3PLyWBcUsSArKg8vn/3QaasW5oNcdPexG4v:QxHQsgHaDKCnkl3PLymcUsTKg8X3QflE

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.3.7:83/o3lN

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASP)

Targets

    • Target

      5535e5975ce189801d2ef6e7825f0e6869d26d6e56660c4342c5ca8c6a329dbd

    • Size

      81KB

    • MD5

      f5f5ac8de65eb39393d5edcfab2cb276

    • SHA1

      cb16d09fbf8694939665b359a7e25c66de60ad92

    • SHA256

      5535e5975ce189801d2ef6e7825f0e6869d26d6e56660c4342c5ca8c6a329dbd

    • SHA512

      2baeb35b3546d55b98ac8a4cb265892e07a0548b605b43e434e74268b8dd7f903d7471325d50dfaa2a337fa9fb56eeee4f50861b35be1832254309c8336332e7

    • SSDEEP

      1536:bpOxH/IMrqOgU/Qa42rjDyV+gKnkl3PLyWBcUsSArKg8vn/3QaasW5oNcdPexG4v:QxHQsgHaDKCnkl3PLymcUsTKg8X3QflE

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks