Extracted

• • Target

    33294012b64123cecd4b1f21404e0b0cad9cd7556c6efb5a41c43f80b775ca1a

  • Size

    177KB

  • MD5

    702419ffd5e768b22037a84c7bad88cd

  • SHA1

    13b3b0dcd128f6574b7392385419ce680efce036

  • SHA256

    33294012b64123cecd4b1f21404e0b0cad9cd7556c6efb5a41c43f80b775ca1a

  • SHA512

    363b81444e2de13c26fc14950d4760a0845f5724eade322bae73bb04ca60396c7c6ff3be577b2c4cfde4cff40e78f722a9744ab46a571536f3bc0985ab9ad192

  • SSDEEP

    3072:rEEkpajNuqwjuwMROeSP4SY5fl2+dGYAo9RK1gz9Koc7yQOiOy2D9OlCSXzGsue8:rEDajNuJjujoeSP4SY5fl2+dGYAo9RKg

  Score

  10^/10

  metasploitbackdoorpersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2