Overview

overview

10

Static

static

1

Copilot_20...38.png

windows10-2004-x64

10

Copilot_20...38.png

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Copilot_20260903_024938.png
  • Size 783KB
  • Sample260905-tjqs6seq7s
  • SHA256 fb12d7211c0b4c02a944b7c11451ba3e8002487da7c0cfefdc06c301c8ffa9a3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
metasploitbackdoordiscoverypersistencetrojan

Malware Config

Extracted

Family

  • metasploit

Version

  • encoder/shikata_ga_nai

Extracted

Family

  • metasploit

Version

  • windows/reverse_tcp

C2

  • 3.17.202.129:17362

Targets

    • Target
      Copilot_20260903_024938.png
    • Size 783KB
    • SHA256 fb12d7211c0b4c02a944b7c11451ba3e8002487da7c0cfefdc06c301c8ffa9a3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoordiscoverymetasploitpersistencetrojan

    • Family: MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks