Overview

overview

10

Static

static

1

2216dcb505...64.exe

windows7-x64

10

2216dcb505...64.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2216dcb505dc88ba0e2a25b8a14b5aa11ea8c909de3badf1f144cc7f5d433164

  • Size

    293KB

  • Sample

    241118-h3jcnasbkr

  • MD5

    7069c16744f57d9ba67d477a5be5067e

  • SHA1

    114a556b3b9cb6eea7e96664275a63dfbca44e98

  • SHA256

    2216dcb505dc88ba0e2a25b8a14b5aa11ea8c909de3badf1f144cc7f5d433164

  • SHA512

    63fd9989ec65291f705dfa0db4c7c474affc24782d2bea7760dbe278ff3c18600455c097f76d070a57459405767e3cbbfcd404d482f15fb9ca40270fdc97ddff

  • SSDEEP

    6144:EkWS459S6Xa1Eqqg36KDe8R+lJOOWjqO/VtfqgkgZ:E+K0ZO1aNi9291/v/

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://120.46.212.33:9999/DuUN

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

Targets

    • Target

      2216dcb505dc88ba0e2a25b8a14b5aa11ea8c909de3badf1f144cc7f5d433164

    • Size

      293KB

    • MD5

      7069c16744f57d9ba67d477a5be5067e

    • SHA1

      114a556b3b9cb6eea7e96664275a63dfbca44e98

    • SHA256

      2216dcb505dc88ba0e2a25b8a14b5aa11ea8c909de3badf1f144cc7f5d433164

    • SHA512

      63fd9989ec65291f705dfa0db4c7c474affc24782d2bea7760dbe278ff3c18600455c097f76d070a57459405767e3cbbfcd404d482f15fb9ca40270fdc97ddff

    • SSDEEP

      6144:EkWS459S6Xa1Eqqg36KDe8R+lJOOWjqO/VtfqgkgZ:E+K0ZO1aNi9291/v/

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks