Overview

overview

10

Static

static

3

ee7fffa345...9d.exe

windows7-x64

7

ee7fffa345...9d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee7fffa34522db1735d3803838d8d55049a665b0a42e1d9da821cf5d03b7289d

  • Size

    9.2MB

  • Sample

    240917-nj5z7szgjg

  • MD5

    64a7d41e4f8edf1914e713aa10a080d4

  • SHA1

    eba316e7f214ab28fefb83e5209d2be794085bfe

  • SHA256

    ee7fffa34522db1735d3803838d8d55049a665b0a42e1d9da821cf5d03b7289d

  • SHA512

    e1043e91e06901abafa8f0cf9e7a23fb4f451548985ab7c74066b1e9a6407d5657a9f8613beba69ddd35bc8c8b5d77a5bfbb2c7df10edee9bf581a95d595b129

  • SSDEEP

    196608:5QEkQH06kL2Vmd6+DKMTNfwZHYYd4hxSR30i:uEkQU6kL2Vmd6mKMBkmOC

Score
10/10
metasploitbackdoorpyinstallertrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.140.131:4444

Targets

    • Target

      ee7fffa34522db1735d3803838d8d55049a665b0a42e1d9da821cf5d03b7289d

    • Size

      9.2MB

    • MD5

      64a7d41e4f8edf1914e713aa10a080d4

    • SHA1

      eba316e7f214ab28fefb83e5209d2be794085bfe

    • SHA256

      ee7fffa34522db1735d3803838d8d55049a665b0a42e1d9da821cf5d03b7289d

    • SHA512

      e1043e91e06901abafa8f0cf9e7a23fb4f451548985ab7c74066b1e9a6407d5657a9f8613beba69ddd35bc8c8b5d77a5bfbb2c7df10edee9bf581a95d595b129

    • SSDEEP

      196608:5QEkQH06kL2Vmd6+DKMTNfwZHYYd4hxSR30i:uEkQU6kL2Vmd6mKMBkmOC

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks