Overview

overview

10

Static

static

3

programa2.exe

windows10-ltsc 2021-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    programa2.exe

  • Size

    2.3MB

  • Sample

    241113-am3glawrhl

  • MD5

    57be6918642245c0564958a4c46319a4

  • SHA1

    d9da2e8ca8b92b16442b3f5008af7eb6c3f4011d

  • SHA256

    1cdc2585192589e17c5b60ec26d6854089da648819c3ed5da27ec72e15b767ba

  • SHA512

    4cac39111634e90a38fb0292624e8a3f754ed694c42747e6684f9c8d629c777451ced7c4be78261331c98ba512ce2ec1f84edea24b69b9a33a09eabc0a11068e

  • SSDEEP

    49152:utF6efD8BHJVeSoP9cFqA5ScMWffdmrfnWg/:TJVeSrqA4qfdmrfnWg/

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

54.207.185.227:17718

Targets

    • Target

      programa2.exe

    • Size

      2.3MB

    • MD5

      57be6918642245c0564958a4c46319a4

    • SHA1

      d9da2e8ca8b92b16442b3f5008af7eb6c3f4011d

    • SHA256

      1cdc2585192589e17c5b60ec26d6854089da648819c3ed5da27ec72e15b767ba

    • SHA512

      4cac39111634e90a38fb0292624e8a3f754ed694c42747e6684f9c8d629c777451ced7c4be78261331c98ba512ce2ec1f84edea24b69b9a33a09eabc0a11068e

    • SSDEEP

      49152:utF6efD8BHJVeSoP9cFqA5ScMWffdmrfnWg/:TJVeSrqA4qfdmrfnWg/

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1

MITRE ATT&CK Matrix

Tasks