Overview

overview

10

Static

static

10

e0842257ea...fd.exe

windows7-x64

10

e0842257ea...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0842257ea12f51768ef8fad38b6b8fb45d18105df2ba42dbd23c6601f89f8fd

  • Size

    10KB

  • Sample

    250326-xw6lyatjt6

  • MD5

    d9434dacee1c86cc2839f1f09a2254a7

  • SHA1

    e80cc358428851082b489c455f123cddc426692f

  • SHA256

    e0842257ea12f51768ef8fad38b6b8fb45d18105df2ba42dbd23c6601f89f8fd

  • SHA512

    d6c63afa5bc5c5adcb8fb90933f38b2a4007429f59a8b9b304fe650e8f8fc7d5451ab45a36419e1defab6cd2ddd103bea645250547bea81f97c5ee0260bf4634

  • SSDEEP

    192:GTRy6NcX4r4BSR3PsVMORsjO2t9IX/F7E5pz6fMVQu/K:kNi4EBc3MMORsjHbwF7tui

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://10.0.0.128:8899/NiOV

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP08; MAAU; NP08)

Targets

    • Target

      e0842257ea12f51768ef8fad38b6b8fb45d18105df2ba42dbd23c6601f89f8fd

    • Size

      10KB

    • MD5

      d9434dacee1c86cc2839f1f09a2254a7

    • SHA1

      e80cc358428851082b489c455f123cddc426692f

    • SHA256

      e0842257ea12f51768ef8fad38b6b8fb45d18105df2ba42dbd23c6601f89f8fd

    • SHA512

      d6c63afa5bc5c5adcb8fb90933f38b2a4007429f59a8b9b304fe650e8f8fc7d5451ab45a36419e1defab6cd2ddd103bea645250547bea81f97c5ee0260bf4634

    • SSDEEP

      192:GTRy6NcX4r4BSR3PsVMORsjO2t9IX/F7E5pz6fMVQu/K:kNi4EBc3MMORsjHbwF7tui

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks