Extracted

• • Target

    8ae36fcc162566b7af488d0bfe6c15d5

  • Size

    106KB

  • MD5

    8ae36fcc162566b7af488d0bfe6c15d5

  • SHA1

    8705eb50f3593749f0ce4f0ac25655b21e8f9713

  • SHA256

    16838e53cf137a9268775b972651efbb3a88ec50c000cdffd31c22a81eaefa0f

  • SHA512

    34a65d7a2954e153a511ea4f9662637854f3a8177b9e11ed68f91348d12d57e4bc7cf53bc46476bc77e0f073f99bcf4bd7e4f2c3c86f1fc185cf0379f9adf042

  • SSDEEP

    3072:mO/hbsVLhXTQfDRAldvKH4gOiwLVTURrBR0:mYwLdotAPGYiwLiR

  Score

  10^/10

  upxmetasploitbackdoorpersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Adds policy Run key to start application

    persistence

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2