Overview

overview

10

Static

static

3

7bdaaba91d...30.exe

windows7-x64

10

7bdaaba91d...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7bdaaba91dd100fa5e36b06f536ab2ff6f0d2b3cf58b58df3f38813706929830

  • Size

    1.2MB

  • Sample

    240628-mem36athma

  • MD5

    fd2d4e0c24a53a9623e43f1606da85fc

  • SHA1

    01db3409f59103506b8829f47d49f66378c894d7

  • SHA256

    7bdaaba91dd100fa5e36b06f536ab2ff6f0d2b3cf58b58df3f38813706929830

  • SHA512

    b85289084190eb8e3774f5082074cb76c80550758f84d1924804e4404019d0f5740a7801095a8b0e2a011e25ed311e1ce3816f9c2b16386c5a3b1e322f86f6d0

  • SSDEEP

    24576:d/Yw+mIYncWCcql7YiGPgHdukAhrQ78yHEX11XRdrBASWHc4yp:d/gYEkQkX/2HHhy

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://101.35.231.166:23411/SSIm

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727)

Targets

    • Target

      7bdaaba91dd100fa5e36b06f536ab2ff6f0d2b3cf58b58df3f38813706929830

    • Size

      1.2MB

    • MD5

      fd2d4e0c24a53a9623e43f1606da85fc

    • SHA1

      01db3409f59103506b8829f47d49f66378c894d7

    • SHA256

      7bdaaba91dd100fa5e36b06f536ab2ff6f0d2b3cf58b58df3f38813706929830

    • SHA512

      b85289084190eb8e3774f5082074cb76c80550758f84d1924804e4404019d0f5740a7801095a8b0e2a011e25ed311e1ce3816f9c2b16386c5a3b1e322f86f6d0

    • SSDEEP

      24576:d/Yw+mIYncWCcql7YiGPgHdukAhrQ78yHEX11XRdrBASWHc4yp:d/gYEkQkX/2HHhy

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks