Overview

overview

10

Static

static

1

wry.ico

windows10-2004-x64

10

wry.ico

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    wry.ico
  • Size 4KB
  • Sample260801-kfwetaxtb1
  • SHA256 b0eb792558f3f3102446d361b05908f83aeac827900cae8ad9ff9f662113f029
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
metasploitbackdoordiscoveryexecutiontrojan

Malware Config

Extracted

Family

  • metasploit

Version

  • metasploit_stager

C2

  • 178.233.136.201:8080

Targets

    • Target
      wry.ico
    • Size 4KB
    • SHA256 b0eb792558f3f3102446d361b05908f83aeac827900cae8ad9ff9f662113f029
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoordiscoveryexecutionmetasploittrojan

    • Family: MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Downloads MZ/PE file

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks