Overview

overview

10

Static

static

10

ok.exe

windows10-1703-x64

10

ok.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ok.exe

  • Size

    4.2MB

  • Sample

    240628-hj7adayfmr

  • MD5

    ec6581a4caf3c65ead5951ea178774cd

  • SHA1

    af4c5700f8961589056267bec0d84f97175926d0

  • SHA256

    af6116778d24cea89c8c0a4662326440ab685bb2c1bd474311f408079eb3db9b

  • SHA512

    072d1d181ff66cf515a83fc0cfc4aaef0858ac4572c151ae4aea5417622078743e68291f6df0887ba8842398dfaf3d4576552c34b4b9e8dff04f02de364c5871

  • SSDEEP

    49152:oYojsldP7HovyKiULrIQjc5E8uxIdtHmLt3/E2yOy1bmvtF6BfEt:9ltrIiULUbETIzE5Vyh1bmvGfi

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:4444

Targets

    • Target

      ok.exe

    • Size

      4.2MB

    • MD5

      ec6581a4caf3c65ead5951ea178774cd

    • SHA1

      af4c5700f8961589056267bec0d84f97175926d0

    • SHA256

      af6116778d24cea89c8c0a4662326440ab685bb2c1bd474311f408079eb3db9b

    • SHA512

      072d1d181ff66cf515a83fc0cfc4aaef0858ac4572c151ae4aea5417622078743e68291f6df0887ba8842398dfaf3d4576552c34b4b9e8dff04f02de364c5871

    • SSDEEP

      49152:oYojsldP7HovyKiULrIQjc5E8uxIdtHmLt3/E2yOy1bmvtF6BfEt:9ltrIiULUbETIzE5Vyh1bmvGfi

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks