Extracted

• • Target

    41207706cf37b8cbef2f1278c70c08cf.exe

  • Size

    144KB

  • MD5

    41207706cf37b8cbef2f1278c70c08cf

  • SHA1

    3561a9a0d49e03031fc06f20d5050623cdf110c4

  • SHA256

    27a1143fbf26ee210e3bf00181227bd7ce1bfd11179a6288d4f66c25824c59b6

  • SHA512

    03f1ca1c7f4e96d69abae2926eb13b4c7b226ea12b9d8292d9811e2b906bc09f15d10f3db8eeda780fcd2ee7708331073432b394087e2a861ddc0237119cd639

  • SSDEEP

    3072:Bpg77mW1Z3Tv7BcUBY9CZ7LBp74AXJFore2/zdWpP3sUhy2bq:K9LBp74AXH0/WlIU

  Score

  10^/10

  metasploitbackdoorpersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2