Overview

overview

10

Static

static

3

f4a16390e9...1a.exe

windows7-x64

10

f4a16390e9...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4a16390e97f33b7b8b6d52d95bc7be308cd313d5598b52531b9676df324bf1a

  • Size

    14KB

  • Sample

    241130-e22aaswrgl

  • MD5

    c9be8b2a288eadab351553547e0755cb

  • SHA1

    80e2a5b5c30379896e2ae9dd26abefbe68e8b7ef

  • SHA256

    f4a16390e97f33b7b8b6d52d95bc7be308cd313d5598b52531b9676df324bf1a

  • SHA512

    35c5928ef2fe8fedcf27071192668a4855a1398d37ca9a97b973e62eff1ef1739dbc27778f3e5869d8b46b3e71cce586da3e84b8fa63870b0eecd157d15115a8

  • SSDEEP

    192:k3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOSZOvNejDMN1:rMCfrfQ6tBSIocleUN1

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://10.30.0.121:80/zYR7

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)

Targets

    • Target

      f4a16390e97f33b7b8b6d52d95bc7be308cd313d5598b52531b9676df324bf1a

    • Size

      14KB

    • MD5

      c9be8b2a288eadab351553547e0755cb

    • SHA1

      80e2a5b5c30379896e2ae9dd26abefbe68e8b7ef

    • SHA256

      f4a16390e97f33b7b8b6d52d95bc7be308cd313d5598b52531b9676df324bf1a

    • SHA512

      35c5928ef2fe8fedcf27071192668a4855a1398d37ca9a97b973e62eff1ef1739dbc27778f3e5869d8b46b3e71cce586da3e84b8fa63870b0eecd157d15115a8

    • SSDEEP

      192:k3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOSZOvNejDMN1:rMCfrfQ6tBSIocleUN1

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks