Overview

overview

10

Static

static

3

e228046a67...32.exe

windows7-x64

7

e228046a67...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e228046a67266978e2c064cac310ba4e2e824de1a476759645ba4e67e86aeb32

  • Size

    7.8MB

  • Sample

    241130-pmbq7stmhx

  • MD5

    eaf60985c9d82577ca7e618d2b7ae9cf

  • SHA1

    bf3d1095af8e4cb98ddbf89ae00209a6b055656c

  • SHA256

    e228046a67266978e2c064cac310ba4e2e824de1a476759645ba4e67e86aeb32

  • SHA512

    d30125983df95695efc55770e045059e1db690dc8b4a8e3e397cdbf603c70966f16e28c36ad16e5745d642b2ee68f54fe1ff27f9d224d601ac33de5c83a8146a

  • SSDEEP

    196608:rrEMRrLxWA1HeT39IigDvKub75bcjWgbICT1zfDkAhkCsa9F:Mmd1+TtIisvB5IjWqhzG0

Score
10/10
metasploitbackdoorpyinstallertrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.59.129:1180

Targets

    • Target

      e228046a67266978e2c064cac310ba4e2e824de1a476759645ba4e67e86aeb32

    • Size

      7.8MB

    • MD5

      eaf60985c9d82577ca7e618d2b7ae9cf

    • SHA1

      bf3d1095af8e4cb98ddbf89ae00209a6b055656c

    • SHA256

      e228046a67266978e2c064cac310ba4e2e824de1a476759645ba4e67e86aeb32

    • SHA512

      d30125983df95695efc55770e045059e1db690dc8b4a8e3e397cdbf603c70966f16e28c36ad16e5745d642b2ee68f54fe1ff27f9d224d601ac33de5c83a8146a

    • SSDEEP

      196608:rrEMRrLxWA1HeT39IigDvKub75bcjWgbICT1zfDkAhkCsa9F:Mmd1+TtIisvB5IjWqhzG0

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks