metasploit | d115ddd1de66d1d220ae9c1cff580c507e56bab234fc19326727f28b6503f613 | Triage

Analysis

max time kernel
156s
max time network
163s
platform
windows7_x64
resource
win7-20240319-en
resource tags

arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
submitted
18-04-2024 09:42

Sharing

Report Analysis Logs

General

Target

PQR3-PDF.exe
Size

72KB
MD5

07f8747a9d428fba403b396a74acf677
SHA1

7fc3710e361f44d2afc9ae1f88888511a409d471
SHA256

d115ddd1de66d1d220ae9c1cff580c507e56bab234fc19326727f28b6503f613
SHA512

08ac2133c8fdc4edb6f85be8fd11f067aed2d88a009ef2f1fdc066cdef0b7597cc7fb44ed8f0ee1bd9e17156247e7164db1b852626b412e36b857e920163a34f
SSDEEP

1536:IRfPco751wrWSQVINb4tvh9ij5AtMb+KR0Nc8QsJq39:Qf0W5qrWBWgvHijSe0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.84.34.113:443

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\PQR3-PDF.exe
"C:\Users\Admin\AppData\Local\Temp\PQR3-PDF.exe"
1⤵
PID:2340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2340-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download