metasploit | 60244997e2ed52cebf6686fe83f8679d09cb32c658f3940ab71ff0b446b88cfe | Triage

Analysis

max time kernel
147s
max time network
152s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18-04-2024 09:42

Sharing

Report Analysis Logs

General

Target

cloud.exe
Size

72KB
MD5

4dbf1a1b85b87c192b7331cc856a291e
SHA1

a17f832d7801cbccb53cd9e023adf678df65fb4f
SHA256

60244997e2ed52cebf6686fe83f8679d09cb32c658f3940ab71ff0b446b88cfe
SHA512

70f2b598801cb468945e3c05ca7524357975f2707785482aa66b7d598c2050afb340b1c9bcc9743d04e9bb0f2594801ea9258da5aaf27d83a0d179daa8290d84
SSDEEP

1536:IltATfzBgDfvn1CvOreN+ZXxo1Mb+KR0Nc8QsJq39:YqfzBalCqeoZhqe0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.86.225.235:4443

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\cloud.exe
"C:\Users\Admin\AppData\Local\Temp\cloud.exe"
1⤵
PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2240-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download