Extracted

• • Target

    05ff8c32c0a65c53885a78c6bbce98f00e1779739be24149687e18c56af4684b.doc

  • Size

    68KB

  • MD5

    de20c0347ea069a7836f182bbd92e71b

  • SHA1

    2b75983707c3acc69bfa86deb85a41074b54920a

  • SHA256

    05ff8c32c0a65c53885a78c6bbce98f00e1779739be24149687e18c56af4684b

  • SHA512

    0aba09b921a65a301652041619d71b1309358b5a980e3e2af48bde951c012cf8825e115a53bb8d125ce09a4ede8f5a1af7f503b00c3a7c4190581edebd4cd54f

  • SSDEEP

    1536:6mncDarFJubeoYse0FB9bPcCASAaLCMI3N6iJ5OhCekS9:9cDw/uXYse0F3dFCRgipep9

  Score

  10^/10

  metasploitbackdoortrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  behavioral1behavioral2