Overview

overview

10

Static

static

10

test.exe

windows7-x64

10

test.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.exe

  • Size

    97KB

  • Sample

    241213-my1hlaxqdn

  • MD5

    2da8bf50fd47036c164a8b2c157c3bce

  • SHA1

    2e1d3207252c80d5b38a8d22df88321f674fb6ff

  • SHA256

    afc1962f51ffb484b12c57162875a20368385146e4ba29d925a230a24877d6b5

  • SHA512

    4d295f3007dc91a6fbdff6a8616eb7134c494de996de8adbe087986515b9986500d422ee4a619462d46a5f43099393c408ac89e43c238ab1d3f9466193f9c1e5

  • SSDEEP

    1536:R5r1wXJoRiTJcYuGLWy5rw3TX2af8JNv4oh+ycDkL17A:xsl9tSyC3TuN3BA

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

209.141.35.225:444

Targets

    • Target

      test.exe

    • Size

      97KB

    • MD5

      2da8bf50fd47036c164a8b2c157c3bce

    • SHA1

      2e1d3207252c80d5b38a8d22df88321f674fb6ff

    • SHA256

      afc1962f51ffb484b12c57162875a20368385146e4ba29d925a230a24877d6b5

    • SHA512

      4d295f3007dc91a6fbdff6a8616eb7134c494de996de8adbe087986515b9986500d422ee4a619462d46a5f43099393c408ac89e43c238ab1d3f9466193f9c1e5

    • SSDEEP

      1536:R5r1wXJoRiTJcYuGLWy5rw3TX2af8JNv4oh+ycDkL17A:xsl9tSyC3TuN3BA

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks