Overview

overview

10

Static

static

3

a1a5a009d6...5N.exe

windows7-x64

10

a1a5a009d6...5N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1a5a009d62b15594b65c5ac0d132d20666b7b5374a3ae1c10b9208dad669a55N

  • Size

    14KB

  • Sample

    241014-tx3pwsvajc

  • MD5

    87c587d17ea57fbef955e6e9e64e3b10

  • SHA1

    4a59fa151b707bfaf0bdec16861342e8755d56b2

  • SHA256

    a1a5a009d62b15594b65c5ac0d132d20666b7b5374a3ae1c10b9208dad669a55

  • SHA512

    e7582ed495e852f8252092c3b134f9b13bde7b70c0ef1f68fa50141aa7ca9e9c59c1205dee2b8fa75e24229a073475469e8753888a6e4415427d96d6634615f3

  • SSDEEP

    192:5HCugRK83SxHn2OQ/dmBI4KBPwgir+xz03kJXbqUqV/Qjo7AGa:xCxRKqbOCdWIVBPk+xzaqrfCXAn

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://119.29.238.164:50055/qCs5

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)

Targets

    • Target

      a1a5a009d62b15594b65c5ac0d132d20666b7b5374a3ae1c10b9208dad669a55N

    • Size

      14KB

    • MD5

      87c587d17ea57fbef955e6e9e64e3b10

    • SHA1

      4a59fa151b707bfaf0bdec16861342e8755d56b2

    • SHA256

      a1a5a009d62b15594b65c5ac0d132d20666b7b5374a3ae1c10b9208dad669a55

    • SHA512

      e7582ed495e852f8252092c3b134f9b13bde7b70c0ef1f68fa50141aa7ca9e9c59c1205dee2b8fa75e24229a073475469e8753888a6e4415427d96d6634615f3

    • SSDEEP

      192:5HCugRK83SxHn2OQ/dmBI4KBPwgir+xz03kJXbqUqV/Qjo7AGa:xCxRKqbOCdWIVBPk+xzaqrfCXAn

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks