Overview

overview

10

Static

static

10

8b32a6092f...90.exe

windows7-x64

10

8b32a6092f...90.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    147s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06-05-2024 00:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090.exe

  • Size

    72KB

  • MD5

    997ba37fac53e2a554391f522cfbb686

  • SHA1

    33898e4c66d4865ab44ce76316755415728f1ca4

  • SHA256

    8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090

  • SHA512

    ae49eb1682030c2d9ccf4523f4d46177b693928fc11e3550404d38b90e2d6cc6f4dcb931a1953ba8921ed38099b6d1f004c45febaa2d6a276f980caf5e8b8850

  • SSDEEP

    1536:IgW8zis9JdneftTv59qu3udkJVyMb+KR0Nc8QsJq39:lWwKVTTqgJYe0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

120.206.61.126:39988

Signatures

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

Processes

  • C:\Users\Admin\AppData\Local\Temp\8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090.exe
    "C:\Users\Admin\AppData\Local\Temp\8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090.exe"
    1⤵
      PID:2324

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2324-0-0x0000000000020000-0x0000000000021000-memory.dmp
      Filesize

      4KB

      Download