Extracted

• • Target

    fe35083f33fc7e3dabfd966feaa88363feb038c9ec7580e27800cde25855a3ad

  • Size

    134KB

  • MD5

    168f4c1be4f7ca043efd6b24b98d81d0

  • SHA1

    1007d485e4a7700bd3cef50f786422f299510825

  • SHA256

    fe35083f33fc7e3dabfd966feaa88363feb038c9ec7580e27800cde25855a3ad

  • SHA512

    242aadc5471664efe591921dcf3e186449764c502873183065faa049936fdbb85cbb1b30b5b4072ddd654276447f6d0afbbc37a955528da138dac8c31c1ba669

  • SSDEEP

    3072:YCi+6hOpjroqK48pYZqHOoQy2EW9YxNVAZ/9Cqs:if8vos8p93QF1IY/Aqs

  Score

  10^/10

  metasploitbackdoortrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Drops file in System32 directory

  behavioral1behavioral2