metasploit | 07e19ef7c68d476ffdb47c77c236fc08eaacbe58aa51d8da417f14563a8e255c | Triage

Analysis

max time kernel
148s
max time network
149s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
17-05-2024 02:21

Sharing

Report Analysis Logs

General

Target

nothingtoseehere.exe
Size

72KB
MD5

883b42bdb6847931b31aa465d0149635
SHA1

f6a8af6b1c498d19cccc7e2fe535d69ae81267c3
SHA256

07e19ef7c68d476ffdb47c77c236fc08eaacbe58aa51d8da417f14563a8e255c
SHA512

704351334493e88bf65f2f7ffd9c3f0590499182e7f2bbf557ea4c5130dd9e457999074d2a300fe7f5e09df81fa6f084577be4f12499f35b27474ee36f93b121
SSDEEP

1536:I20I2yXSDTVGDbgP4f0PWaKsEMb+KR0Nc8QsJq39:jlXSDTVDP+FaKsEe0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.44.55:4455

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\nothingtoseehere.exe
"C:\Users\Admin\AppData\Local\Temp\nothingtoseehere.exe"
1⤵
PID:1920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1920-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download