Overview

overview

10

Static

static

5

62eb3e3c2e...52.exe

windows7-x64

10

62eb3e3c2e...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62eb3e3c2e6bbec787239feb4d9e95211959d60eaa1ffa69fd15b7dcbe506652

  • Size

    2.3MB

  • Sample

    241111-2z7qmaxqay

  • MD5

    10aa9bd22f5bec44cf8f7f6e114289b2

  • SHA1

    11a17c156c2f95241b99bdbd8adfb142c2926ab1

  • SHA256

    62eb3e3c2e6bbec787239feb4d9e95211959d60eaa1ffa69fd15b7dcbe506652

  • SHA512

    713d65f6c6ec265392c57f3937a45945842c71edd5b821bd4bc1a3fdaff0e6e838d79bd6d379a6100873923efb5f2b2f58bb553d4b2f3f0ce5c36b34151af6ba

  • SSDEEP

    49152:eb6YlxiqHeqFkZuBc1L2rN6Imv6XM1aXD7Z9PZkf2Ot6ZdzWFG:I6YlFeAUL4YImv6XnzXPI2Oo7SA

Score
10/10
metasploitbackdoortrojanupx

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.49:5555

Targets

    • Target

      62eb3e3c2e6bbec787239feb4d9e95211959d60eaa1ffa69fd15b7dcbe506652

    • Size

      2.3MB

    • MD5

      10aa9bd22f5bec44cf8f7f6e114289b2

    • SHA1

      11a17c156c2f95241b99bdbd8adfb142c2926ab1

    • SHA256

      62eb3e3c2e6bbec787239feb4d9e95211959d60eaa1ffa69fd15b7dcbe506652

    • SHA512

      713d65f6c6ec265392c57f3937a45945842c71edd5b821bd4bc1a3fdaff0e6e838d79bd6d379a6100873923efb5f2b2f58bb553d4b2f3f0ce5c36b34151af6ba

    • SSDEEP

      49152:eb6YlxiqHeqFkZuBc1L2rN6Imv6XM1aXD7Z9PZkf2Ot6ZdzWFG:I6YlFeAUL4YImv6XnzXPI2Oo7SA

    Score
    10/10
    metasploitbackdoortrojanupx

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks