metasploit | c98cc35f5c3ca4fd2453810d031fc0020da7bf74ca451e6d903f5157d78e64a7

Analysis

max time kernel
137s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/01/2024, 10:32

Target

c98cc35f5c3ca4fd2453810d031fc0020da7bf74ca451e6d903f5157d78e64a7.exe
Size

14KB
MD5

3025963e773a62175c2fb524835b405f
SHA1

c9bbd5f02a50bfc264983d514a04481ac125d53c
SHA256

c98cc35f5c3ca4fd2453810d031fc0020da7bf74ca451e6d903f5157d78e64a7
SHA512

61e868de25db27cec8f72f99fcf86ad55f896589ef6350fa853f06aa94edbf78b17b56df20eccbf2e401f24e134bdef0c93058114df1e0a9f7bafa21c4b74ac3
SSDEEP

192:z3mbPYCfMcrfOIuZmvKQxtzlSIVX6NO8r9ejDMN1:aMCfrfQ6tBSI2eUN1

Score

10^/10

Family

metasploit

Version

windows/download_exec

http://192.168.241.128:4444/eSYK

Attributes

headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM; MANM)

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\c98cc35f5c3ca4fd2453810d031fc0020da7bf74ca451e6d903f5157d78e64a7.exe
"C:\Users\Admin\AppData\Local\Temp\c98cc35f5c3ca4fd2453810d031fc0020da7bf74ca451e6d903f5157d78e64a7.exe"
1⤵
PID:1348

memory/1348-0-0x0000000000100000-0x0000000000101000-memory.dmp

Filesize
4KB

Download
memory/1348-1-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1348-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download