Overview

overview

10

Static

static

3

230f90bb0e...f0.exe

windows7-x64

7

230f90bb0e...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    230f90bb0e0b11907854e59e63a040b0524fe3e3d6790d290d6fca8d2e0a73f0

  • Size

    10.1MB

  • Sample

    241228-mrc4qaxrer

  • MD5

    6cb409f46ff2c5fff4dccec2daa01c68

  • SHA1

    da84249c2f7ec40d36c2cd0771d6587471ef6c8a

  • SHA256

    230f90bb0e0b11907854e59e63a040b0524fe3e3d6790d290d6fca8d2e0a73f0

  • SHA512

    4aefb8687bface87bfca61da7a150f4e2d876f378365f9f1f36d3ff0ef36b3d8286b0e9beecde946c8cfddaffc32c623e18ef651bb3c0f921a17309393cf9196

  • SSDEEP

    196608:VyI9Yi07+K1W903eV4QRZMToEuGxgh858F0ibfUpWYgABAbk9yt8Rpr:z9Yiu+AW+eGQRZMTozGxu8C0ibfcWr+/

Score
10/10
metasploitbackdoorpyinstallertrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

202.182.125.24:20529

Targets

    • Target

      230f90bb0e0b11907854e59e63a040b0524fe3e3d6790d290d6fca8d2e0a73f0

    • Size

      10.1MB

    • MD5

      6cb409f46ff2c5fff4dccec2daa01c68

    • SHA1

      da84249c2f7ec40d36c2cd0771d6587471ef6c8a

    • SHA256

      230f90bb0e0b11907854e59e63a040b0524fe3e3d6790d290d6fca8d2e0a73f0

    • SHA512

      4aefb8687bface87bfca61da7a150f4e2d876f378365f9f1f36d3ff0ef36b3d8286b0e9beecde946c8cfddaffc32c623e18ef651bb3c0f921a17309393cf9196

    • SSDEEP

      196608:VyI9Yi07+K1W903eV4QRZMToEuGxgh858F0ibfUpWYgABAbk9yt8Rpr:z9Yiu+AW+eGQRZMTozGxu8C0ibfcWr+/

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks