metasploit | 3e087ba4f93b64eed7ba678ac92e712ba13e8ee9aa0e591109d9eb92a8f61b3b | Triage

Analysis

max time kernel
122s
max time network
140s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
02-02-2024 07:52

Sharing

Report Analysis Logs

General

Target

02022024_1552_pdf_exe.exe
Size

72KB
MD5

133d2ac63943e36a4fac9f811323b5da
SHA1

b7d9729f4083d9ecf10b1fe27536958a4d8d4e3e
SHA256

3e087ba4f93b64eed7ba678ac92e712ba13e8ee9aa0e591109d9eb92a8f61b3b
SHA512

06b04cec49646fcb385fe95aa2cabaade4f9c4632f3f245a89b1a157fe67d7182bf2d5d8409e45b1c8e7cad564fc77735cc419835fbad588499153f6469888a5
SSDEEP

1536:I5U2puzgJWEi4vccsn/fgH+3veGQMb+KR0Nc8QsJq39:6UKuzgJO4Ub/Ye3veGQe0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

79.110.48.22:4444

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\02022024_1552_pdf_exe.exe
"C:\Users\Admin\AppData\Local\Temp\02022024_1552_pdf_exe.exe"
1⤵
PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3044-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download