metasploit | 914a13f86d053e8296256aa5b710e50360b3816ad216d6a9b86252ecc2dd0dd0 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
20-04-2024 09:43

Sharing

Report Analysis Logs

General

Target

keygun.exe
Size

7KB
MD5

1caf1220bd0487408ae78dfbc87a97a4
SHA1

b5f6d32809e6f7161a789f9bc7fd3831ab7e9b11
SHA256

914a13f86d053e8296256aa5b710e50360b3816ad216d6a9b86252ecc2dd0dd0
SHA512

9d9e8e600c9be540a7fa35b58fb700eacc80d2fe6a53e856ea3df6c250ff9a771e7bbc4206c0790fb3b081808e40cd658ce32104ff4e2a26d4f7dfc4bfa98c44
SSDEEP

24:eFGStrJ9u0/6sUnZdkBQAVoac+HKLqCIeNDMSCvOXpmB:is0h4kBQVR+HrSD9C2kB

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

103.95.97.149:4444

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\keygun.exe
"C:\Users\Admin\AppData\Local\Temp\keygun.exe"
1⤵
PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2392-0-0x0000000140000000-0x0000000140004278-memory.dmp

Filesize
16KB

Download
memory/2392-1-0x0000000140000000-0x0000000140004278-memory.dmp

Filesize
16KB

Download