metasploit | a3b14096156684a6aed44851c7c9d1fbe64e7926cbdf57317f083f0ca1ae4d06 | Triage

Analysis

max time kernel
34s
max time network
40s
platform
windows7_x64
resource
win7-20220414-en
submitted
15-06-2022 14:47

Sharing

Report Analysis Logs

General

Target

javaw.exe
Size

7KB
MD5

00444f498cad8ff2ff8f0ac20f7d5fd7
SHA1

061764179ddb3c19fd8044605e55b3407187a54e
SHA256

a3b14096156684a6aed44851c7c9d1fbe64e7926cbdf57317f083f0ca1ae4d06
SHA512

902e9c3ba6275fb8b3047a6b31567004ca8b0fe68f19110d424e63b04d336a0b31c8e8209c98fb6dd0c77c597b6f51e7e75ad88a753c4557a8ee945af4122fd0

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

3.70.110.188:52509

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\javaw.exe
"C:\Users\Admin\AppData\Local\Temp\javaw.exe"
1⤵
PID:1000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1000-54-0x0000000140000000-0x0000000140004278-memory.dmp

Filesize
16KB

Download