Overview

overview

10

Static

static

10

2025-03-30...er.exe

windows7-x64

1

2025-03-30...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-30_9a608475636b6bad2946507f050ac714_black-basta_hijackloader_luca-stealer

  • Size

    16.4MB

  • Sample

    250330-n2gekaxzev

  • MD5

    9a608475636b6bad2946507f050ac714

  • SHA1

    e116f539eb1aae2f8a8cb85df3e11228a6915c31

  • SHA256

    b6840a9953e45f86138317f86122e2ae335679488c88d1de5525a036fda533a5

  • SHA512

    a94ad9306350b70f83190881d8c01e50415c368362130926b0f51d6bd070f738b7122db20de61ff891fd27ea185b48f0d3f10ae58ac10f0d35c0cf1225e7abef

  • SSDEEP

    393216:pQxDQ7Te43Oumu165sBPzU3WS1C5VyLErOOtMvKLPEwFGS73AKiS1C5VyLErOOtD:pQxDQ/3OdbAzU3WS1CIOOWqk3AZS1CIw

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.168:4445

Targets

    • Target

      2025-03-30_9a608475636b6bad2946507f050ac714_black-basta_hijackloader_luca-stealer

    • Size

      16.4MB

    • MD5

      9a608475636b6bad2946507f050ac714

    • SHA1

      e116f539eb1aae2f8a8cb85df3e11228a6915c31

    • SHA256

      b6840a9953e45f86138317f86122e2ae335679488c88d1de5525a036fda533a5

    • SHA512

      a94ad9306350b70f83190881d8c01e50415c368362130926b0f51d6bd070f738b7122db20de61ff891fd27ea185b48f0d3f10ae58ac10f0d35c0cf1225e7abef

    • SSDEEP

      393216:pQxDQ7Te43Oumu165sBPzU3WS1C5VyLErOOtMvKLPEwFGS73AKiS1C5VyLErOOtD:pQxDQ/3OdbAzU3WS1CIOOWqk3AZS1CIw

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks