metasploit | 223ffa433562c46449f2eb7d7749d193a781c82add9a4bd8f39407bbe66fc518 | Triage

Analysis

max time kernel
0s
max time network
3s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16-04-2024 20:50

Sharing

Report Analysis Logs

General

Target

payload_meterpreter_7.exe
Size

72KB
MD5

83c4385008258ca4cd716bbea8fd1a50
SHA1

080cc82da4cc91b2da6d9a0c2cffb1538b8a80a0
SHA256

223ffa433562c46449f2eb7d7749d193a781c82add9a4bd8f39407bbe66fc518
SHA512

dd40c2d474e88b1c4bbe11f2b5d3d7b14c6b14132c5e91da7d1eaf73ded2b51bfedc351a41b335e3972bd45055759545ba1cfaa7e33d6ee11c689ee894c93dbb
SSDEEP

1536:Is7CYi+/CtY7Z8W+SxmSUrkeU3Mb+KR0Nc8QsJq39:VNiSCxrumXrue0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.100:4444

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\payload_meterpreter_7.exe
"C:\Users\Admin\AppData\Local\Temp\payload_meterpreter_7.exe"
1⤵
PID:2160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2160-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download