Overview

overview

10

Static

static

10

722bfc8d82...16.exe

windows7-x64

10

722bfc8d82...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316

  • Size

    61KB

  • Sample

    241125-h2nwravngx

  • MD5

    624abb551df76673771cee3ff32bc003

  • SHA1

    e259f08a467f824c8026f8c31cb1e0b0c58d709c

  • SHA256

    722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316

  • SHA512

    cefba8ce09c136cffb35f8e40efb4bda5060f58a67472c02b2e87f8950e8c4b87448135c0c0d499c9f34c4af78c8739ab1aabfab12ed6d1a51057378e45efa59

  • SSDEEP

    384:xTtTbyweTufayZfPYiIEHKQiR/+xwkrnxPtoG9sdSPJjQfBXZWHSFP/KP89Z0p:xBTbSyN6Y+G9zJ6BpWHSp/KP898

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.154.130:2662/T6hj

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 733; .NET CLR 2.0.50727)

Targets

    • Target

      722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316

    • Size

      61KB

    • MD5

      624abb551df76673771cee3ff32bc003

    • SHA1

      e259f08a467f824c8026f8c31cb1e0b0c58d709c

    • SHA256

      722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316

    • SHA512

      cefba8ce09c136cffb35f8e40efb4bda5060f58a67472c02b2e87f8950e8c4b87448135c0c0d499c9f34c4af78c8739ab1aabfab12ed6d1a51057378e45efa59

    • SSDEEP

      384:xTtTbyweTufayZfPYiIEHKQiR/+xwkrnxPtoG9sdSPJjQfBXZWHSFP/KP89Z0p:xBTbSyN6Y+G9zJ6BpWHSp/KP898

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks