Overview

overview

10

Static

static

3

b41a988bdf...a0.exe

windows7-x64

10

b41a988bdf...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b41a988bdf7f9184b63d2d666fec84e1271530f7ad2dd4955474851cd85585a0

  • Size

    14KB

  • Sample

    240924-rh5vlaybml

  • MD5

    f71540c394b40c37f51658cd30cba550

  • SHA1

    06c2c848fc90eef7010ec11e3d61682ee9399800

  • SHA256

    b41a988bdf7f9184b63d2d666fec84e1271530f7ad2dd4955474851cd85585a0

  • SHA512

    5704b551abe9cfebaaa1b7c2d1de05173b9efbb8e741bca683dd2bbc2e80d81d8899357a42b8b0cdb595c0c2343672b499c7b9b61d7008fe32b901ff6060c7a3

  • SSDEEP

    192:i3mbPYCfMcrfOIuZmvKQxtzlSIVX6NO45ejDMN1:5MCfrfQ6tBSIO5eUN1

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.77.130:1234/b7Lw

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MATBJS)

Targets

    • Target

      b41a988bdf7f9184b63d2d666fec84e1271530f7ad2dd4955474851cd85585a0

    • Size

      14KB

    • MD5

      f71540c394b40c37f51658cd30cba550

    • SHA1

      06c2c848fc90eef7010ec11e3d61682ee9399800

    • SHA256

      b41a988bdf7f9184b63d2d666fec84e1271530f7ad2dd4955474851cd85585a0

    • SHA512

      5704b551abe9cfebaaa1b7c2d1de05173b9efbb8e741bca683dd2bbc2e80d81d8899357a42b8b0cdb595c0c2343672b499c7b9b61d7008fe32b901ff6060c7a3

    • SSDEEP

      192:i3mbPYCfMcrfOIuZmvKQxtzlSIVX6NO45ejDMN1:5MCfrfQ6tBSIO5eUN1

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks