Overview

overview

10

Static

static

3

5bf445112b...da.exe

windows7-x64

10

5bf445112b...da.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5bf445112b5a588626a5a40bc37c827c354b5a8d90c3ddbda2240805032d18da

  • Size

    5.4MB

  • Sample

    241223-qzakca1lev

  • MD5

    6cea8990eb7540940c1ab8b721abe696

  • SHA1

    fbea8d2c035c1bb3bddb925e203f3c93949c28f8

  • SHA256

    5bf445112b5a588626a5a40bc37c827c354b5a8d90c3ddbda2240805032d18da

  • SHA512

    0a87631b28d851a1bd4cde936b99b1778a2070765cd98178f25e84b55e42dd4dc50d5a425b0b0a6229b9225ce252df933db7b7ea206e30a6e834347dbb5d4b78

  • SSDEEP

    98304:HJ8/CBGMpzoLLJ3TbwaVvrZE0IdSyzlzVGJHGuvEbPd7qnoPTVuqpQ+xSo:HS/CBGM9onJ5hrZERNRz0mMEbPd7GoB/

Score
10/10
metasploitbackdoorpyinstallertrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.20.130:4444

Targets

    • Target

      5bf445112b5a588626a5a40bc37c827c354b5a8d90c3ddbda2240805032d18da

    • Size

      5.4MB

    • MD5

      6cea8990eb7540940c1ab8b721abe696

    • SHA1

      fbea8d2c035c1bb3bddb925e203f3c93949c28f8

    • SHA256

      5bf445112b5a588626a5a40bc37c827c354b5a8d90c3ddbda2240805032d18da

    • SHA512

      0a87631b28d851a1bd4cde936b99b1778a2070765cd98178f25e84b55e42dd4dc50d5a425b0b0a6229b9225ce252df933db7b7ea206e30a6e834347dbb5d4b78

    • SSDEEP

      98304:HJ8/CBGMpzoLLJ3TbwaVvrZE0IdSyzlzVGJHGuvEbPd7qnoPTVuqpQ+xSo:HS/CBGM9onJ5hrZERNRz0mMEbPd7GoB/

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks