Extracted

• • Target

    09d3ad35060113492337c07466e187b3a14a36e6cea9be417a7fc7f7acfc9757

  • Size

    1.8MB

  • MD5

    82a97145474f9241f278ba71388d6fb1

  • SHA1

    908e3440ed9c7986c0b2d6fdae7b0150e6f2c1fa

  • SHA256

    09d3ad35060113492337c07466e187b3a14a36e6cea9be417a7fc7f7acfc9757

  • SHA512

    306ff81b5c62eb2686c92f9a3a2846faf6c11e10869bc943da0124138c9e37b0eae36428e3269631fd5e5442db67a5dfd5dc21822457c1a59afd4a9bebf40d66

  • SSDEEP

    24576:/3vLRdVhZBK8NogWYO09xOGi9JoBqgvppOir7kw8atSw6ZwaIi0HjwC/hR:/3d5ZQ1rxJ/QUiUUt96Z0D

  Score

  10^/10

  metasploitbackdoordiscoveryspywarestealertrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Drops file in Drivers directory

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2