metasploit | e55715c40f5d96c1e87f5a6cbf4801adb6f58e4e3576a61b9214ca247e9b5a4c | Triage

Analysis

max time kernel
86s
max time network
90s
platform
windows10-2004_x64
resource
win10v2004-20220718-en
resource tags

arch:x64arch:x86image:win10v2004-20220718-enlocale:en-usos:windows10-2004-x64system
submitted
20-07-2022 10:17

Sharing

Report Analysis Logs

General

Target

e55715c40f5d96c1e87f5a6cbf4801adb6f58e4e3576a61b9214ca247e9b5a4c.exe
Size

126KB
MD5

918a171e9ca451d6590e78da4a8c2a2d
SHA1

efb6bb51d7038fd3cc82ec353d1d57160293b329
SHA256

e55715c40f5d96c1e87f5a6cbf4801adb6f58e4e3576a61b9214ca247e9b5a4c
SHA512

76908dd0bb35fb6b0fedab07b056f5d568c7738829d2f927ed3875e1bcf3935f90f0530c16b7664b37aa7df80f3d91da7fb6ad0d05f275fa38a868ab5fdde473

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://150.158.23.95:80/JbnB

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\e55715c40f5d96c1e87f5a6cbf4801adb6f58e4e3576a61b9214ca247e9b5a4c.exe
"C:\Users\Admin\AppData\Local\Temp\e55715c40f5d96c1e87f5a6cbf4801adb6f58e4e3576a61b9214ca247e9b5a4c.exe"
1⤵
PID:1516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1516-130-0x0000000000F20000-0x0000000000F54000-memory.dmp

Filesize
208KB

Download