Overview

overview

10

Static

static

10

b83b58ba53...b1.exe

windows7-x64

9

b83b58ba53...b1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b83b58ba53eff704f661363a73c25376af5bd43c59389c564979334ea758c8b1

  • Size

    3.5MB

  • Sample

    240630-bnmcfa1eqh

  • MD5

    13488684508134d66abbb34ef247ec67

  • SHA1

    618bd1619a50be1e5836b0f7e092594601bf9ea9

  • SHA256

    b83b58ba53eff704f661363a73c25376af5bd43c59389c564979334ea758c8b1

  • SHA512

    c001f7dfe0337622eb23ab96f834d1001007a0928e63715b088fc2ef0c1fa409434c2699e50659c110764b690b2d01f6b45bcc0fde47125834f252952df9c4ac

  • SSDEEP

    98304:HuvL5w/nriAHWqA+YeH4Spu6TX/vLX3wgTvFEw46k:wLm/jHx/X3TEd6

Score
10/10
metasploitbackdoortrojanupx

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.98.129:5567

Targets

    • Target

      b83b58ba53eff704f661363a73c25376af5bd43c59389c564979334ea758c8b1

    • Size

      3.5MB

    • MD5

      13488684508134d66abbb34ef247ec67

    • SHA1

      618bd1619a50be1e5836b0f7e092594601bf9ea9

    • SHA256

      b83b58ba53eff704f661363a73c25376af5bd43c59389c564979334ea758c8b1

    • SHA512

      c001f7dfe0337622eb23ab96f834d1001007a0928e63715b088fc2ef0c1fa409434c2699e50659c110764b690b2d01f6b45bcc0fde47125834f252952df9c4ac

    • SSDEEP

      98304:HuvL5w/nriAHWqA+YeH4Spu6TX/vLX3wgTvFEw46k:wLm/jHx/X3TEd6

    Score
    10/10
    upxmetasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks