Overview

overview

10

Static

static

3

1c863a3266...c8.exe

windows7-x64

10

1c863a3266...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c863a3266ae43a491880228904a1b715ca109be6b70c4add6d47343996131c8.exe

  • Size

    72KB

  • Sample

    240704-3s4wtswerp

  • MD5

    9fe0a2f42a7c09c8be4091e20a90c980

  • SHA1

    f79dd06f16fa12014a0f76abd6316c8797fdac52

  • SHA256

    1c863a3266ae43a491880228904a1b715ca109be6b70c4add6d47343996131c8

  • SHA512

    50eab378c39b9ec10532e86e36df749012c236e09d837557aecb2be6ccffb1a0ed74a1787e4881b95fe8502eaa131cd3f42fafec725760a9d66e8edd79d9aac4

  • SSDEEP

    1536:Ii8W/0kc8QaaYOi9gBLuku0BBgCNzJOQMb+KR0Nc8QsJq39:+i9gBLtBGuzgQe0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

119.13.101.214:16494

Targets

    • Target

      1c863a3266ae43a491880228904a1b715ca109be6b70c4add6d47343996131c8.exe

    • Size

      72KB

    • MD5

      9fe0a2f42a7c09c8be4091e20a90c980

    • SHA1

      f79dd06f16fa12014a0f76abd6316c8797fdac52

    • SHA256

      1c863a3266ae43a491880228904a1b715ca109be6b70c4add6d47343996131c8

    • SHA512

      50eab378c39b9ec10532e86e36df749012c236e09d837557aecb2be6ccffb1a0ed74a1787e4881b95fe8502eaa131cd3f42fafec725760a9d66e8edd79d9aac4

    • SSDEEP

      1536:Ii8W/0kc8QaaYOi9gBLuku0BBgCNzJOQMb+KR0Nc8QsJq39:+i9gBLtBGuzgQe0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks