Overview

overview

10

Static

static

3

0a4ba04b66...fc.exe

windows7-x64

10

0a4ba04b66...fc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a4ba04b6642e7cd7b5fc6a8a64f495493282c5fa6be90a3827f900e4aba55fc

  • Size

    10KB

  • Sample

    250328-fwgjdatp15

  • MD5

    846fe7da6c3539edc70e0116d5e40a3b

  • SHA1

    df7dfb5d8645a5c0dfde8c00b06d2118fed1df04

  • SHA256

    0a4ba04b6642e7cd7b5fc6a8a64f495493282c5fa6be90a3827f900e4aba55fc

  • SHA512

    6e28ce8e680662103b63538504d060d1b478734961ceaac99f79fafaf1378bc1fa00bc090f219e0ccc1f01a6d1f8e1514b776a2ddc7447cfb3b881ce13e54a41

  • SSDEEP

    192:eSM39NyVxu+palSPcPTWs8ULih1QTCVQuT7RakG3ooHSEKLMnnnn2:e5fyPuAPHYih16CmcRakDjLp

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.30.152:80/ceHL

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; NP07; NP07)

Targets

    • Target

      0a4ba04b6642e7cd7b5fc6a8a64f495493282c5fa6be90a3827f900e4aba55fc

    • Size

      10KB

    • MD5

      846fe7da6c3539edc70e0116d5e40a3b

    • SHA1

      df7dfb5d8645a5c0dfde8c00b06d2118fed1df04

    • SHA256

      0a4ba04b6642e7cd7b5fc6a8a64f495493282c5fa6be90a3827f900e4aba55fc

    • SHA512

      6e28ce8e680662103b63538504d060d1b478734961ceaac99f79fafaf1378bc1fa00bc090f219e0ccc1f01a6d1f8e1514b776a2ddc7447cfb3b881ce13e54a41

    • SSDEEP

      192:eSM39NyVxu+palSPcPTWs8ULih1QTCVQuT7RakG3ooHSEKLMnnnn2:e5fyPuAPHYih16CmcRakDjLp

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks