metasploit | b2b7029d7e0cc09d143bddb474993490feea8bf5d85a8f035ab61847c9f42e1e | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
03-05-2024 22:02

Sharing

Report Analysis Logs

General

Target

backd.exe
Size

72KB
MD5

0bebee037f29663a3ea7ae975dcfe371
SHA1

fd774ded5f14049c01d54e53896f44eb3575f74e
SHA256

b2b7029d7e0cc09d143bddb474993490feea8bf5d85a8f035ab61847c9f42e1e
SHA512

2c8c8bf94d470b368e2c6a096b483efd13a944409291f3e6ff6bc626ce3001ee79560ea936936eaf0286e490f5b8a60e429254c2e69aefe3ab4b1440687957d6
SSDEEP

1536:IsKylULY4TrUPjen/CpIFH1xigwnfdHydsMb+KR0Nc8QsJq39:T3QTrU7e/PFbSS2e0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.67.112.102:13911

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\backd.exe
"C:\Users\Admin\AppData\Local\Temp\backd.exe"
1⤵
PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2888-1-0x0000000000230000-0x0000000000262000-memory.dmp

Filesize
200KB

Download
memory/2888-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download