metasploit | a661c6098f22a3a406af3a32819156230ec5877ddf977cdb003acce2f74bcc0f | Triage

Analysis

max time kernel
45s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
02-09-2022 19:40

Sharing

Report Analysis Logs

General

Target

sh443.exe
Size

7KB
MD5

9d463564c20904534416809fa9a5a617
SHA1

e81721f39665cab0eb65d035d2ffb96c5b7b5e61
SHA256

c2aa1fe2ef5abcce2af6e7f880e9998c374b7a3c9c4719186b4c482ea01562e5
SHA512

211fc4544f3bc1975099d73cc8034c3c2de2ab6745f2c406c3ee6e3d1565db4bf0386ca63ca734bd0e7c6056e1a911fef9c64b825153cc0fea78e12bb476524b
SSDEEP

24:eFGStrJ9u0/63/w3nZdkBQAVKGkyKtRq1eNDMSCvOXpmB:is0QwTkBQv1yKUSD9C2kB

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

5.230.72.64:443

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\sh443.exe
"C:\Users\Admin\AppData\Local\Temp\sh443.exe"
1⤵
PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1368-54-0x0000000140000000-0x0000000140004278-memory.dmp

Filesize
16KB

Download