metasploit | d25d574246308183b7663f3318a86825077afa2c414936949a45864c28bbff0e | Triage

Analysis

max time kernel
147s
max time network
150s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
16-04-2024 21:23

Sharing

Report Analysis Logs

General

Target

Dataset/payload_meterpreter_41.exe
Size

72KB
MD5

7742d06875968d305903067f7f828474
SHA1

a0c42885be41fbff4fe1c074517a0caacca0800e
SHA256

15d3bebd8a44caf765af17dd64c53a38fe675a46ffe0a4305809fda8d7f7641a
SHA512

6849a8a4d7db3dbb6b268e4dc23d3d1eaa755ff7702beb2da7ffc8069b62a5346f8b7dc56bf5ffb2541babc0c2df33a6e02093beae953a1ec0a3760fc1b9f49e
SSDEEP

1536:IZ7OeRKSyUCc2KB8PX77KOdMb+KR0Nc8QsJq39:c7oSyUuzPXnKOde0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.100:4444

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\Dataset\payload_meterpreter_41.exe
"C:\Users\Admin\AppData\Local\Temp\Dataset\payload_meterpreter_41.exe"
1⤵
PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3036-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download