Extracted

• • Target
    exploit.docx
  • Size 60KB
  • SHA256 59e08d42ce495f290c4dfd7be9614f786cdfed3ebdd7d6e68accbb630c051083
  • MD5 ffeb8e4150061e66092e9bbb513167f7
  • SHA1 01dbd9af94ee45729c07a059d172fc8a29f9aec1
  • SHA512 0e39131c8028ac82c51d50b81dd794eda35569415b01ecc0454851b863c69d120d925997c00d6372f6240026764bd8f7002f6a2307b71a5214f7873378bee7f3
  • MD5 SHA1 SHA512

  Score

  10^/10

  metasploitbackdoortrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Abuses OpenXML format to download file from external location

  behavioral1behavioral2