metasploit | d070ca0aad392b84d0765d02c8ae9124a06b029e0c61bfa72a3049c465722d3e

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
01-06-2024 12:32

Target

d070ca0aad392b84d0765d02c8ae9124a06b029e0c61bfa72a3049c465722d3e.exe
Size

7.6MB
MD5

29f6695de9a9d09b91db6ab4574e1174
SHA1

c79235a3e4c00f97cf0194baad720f03fc765602
SHA256

d070ca0aad392b84d0765d02c8ae9124a06b029e0c61bfa72a3049c465722d3e
SHA512

520ab61f42b4e005abbfc26b58cc113dd6e84e0cd75a552a490b336b72dbfbcff1443b9370534cf99e2c6aecf5640d3bbc6fa8098bc573a91d08300a929dd006
SSDEEP

98304:ACF+OIyoWoZf1i0hUNfHBiCV2HW/E9C0hUNfHBiCV2HvNX/H0hUNfHBiCV2HvNX/:T+OIynoyjNIKEEjNYBHjNYB

Score

10^/10

Family

metasploit

Version

encoder/shikata_ga_nai

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\d070ca0aad392b84d0765d02c8ae9124a06b029e0c61bfa72a3049c465722d3e.exe
"C:\Users\Admin\AppData\Local\Temp\d070ca0aad392b84d0765d02c8ae9124a06b029e0c61bfa72a3049c465722d3e.exe"
1⤵
PID:1708

memory/1708-0-0x0000000000350000-0x0000000000381000-memory.dmp

Filesize
196KB

Download
memory/1708-4-0x0000000000400000-0x0000000000BAA0A8-memory.dmp

Filesize
7.7MB

Download
memory/1708-5-0x00000000027D0000-0x0000000002801000-memory.dmp

Filesize
196KB

Download
memory/1708-9-0x0000000000400000-0x0000000000BAA0A8-memory.dmp

Filesize
7.7MB

Download