metasploit | 4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49

Analysis

max time kernel
148s
max time network
148s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
29-03-2024 04:58

Target

4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49.exe
Size

5KB
MD5

d8749aaa55fcb619256e735332f3e3f9
SHA1

40b20f74004a682762001d7b32ea0b56969e4e11
SHA256

4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49
SHA512

4b472e26618e86c62e184b05fa7104e2fd705845ca1bf778c4d94f4047485393a7b4a08b88aa2a824caffc58913cdabd2f3faba6541618091b6042de83550c15
SSDEEP

48:6PHH1U8lmvsgMuoRjSEnSv69TJdqg+OPuld0D5I:6qd8tdSyRJdYf0D

Score

10^/10

Family

metasploit

Version

windows/reverse_tcp

192.168.31.54:4313

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49.exe
"C:\Users\Admin\AppData\Local\Temp\4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49.exe"
1⤵
PID:2416

memory/2416-0-0x0000000000800000-0x000000000080A000-memory.dmp

Filesize
40KB

Download
memory/2416-3-0x0000000074BB0000-0x000000007529E000-memory.dmp

Filesize
6.9MB

Download
memory/2416-1-0x0000000000350000-0x0000000000351000-memory.dmp

Filesize
4KB

Download
memory/2416-4-0x0000000074BB0000-0x000000007529E000-memory.dmp

Filesize
6.9MB

Download