metasploit | 354b77125e098f1cc32548c5a49625caf68440308f3f277da6c33c5a1851969a | Triage

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14-09-2024 10:22

Sharing

Report Analysis Logs

General

Target

73c480c824673952bdb2ed690d8c9100N.exe
Size

7KB
MD5

73c480c824673952bdb2ed690d8c9100
SHA1

7a48d48ebd540a1f17d3fe3ddf59c7bd9b376c0c
SHA256

354b77125e098f1cc32548c5a49625caf68440308f3f277da6c33c5a1851969a
SHA512

0a9daf5d7869dc3bc49c4c77439db4df654d7e03f7207d4c753d1b55ca882a330b69d157426dbf6333f0830ff51296f51d07ef42e18405c5ee9827bae4d2c5f5
SSDEEP

24:eFGStrJ9u0/6nm2VnZd0BQAVoacNwKZqTeNDMSeXixpmB:is0kV0BQVRuNSD9eS2B

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

127.0.0.1:4444

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

C:\Users\Admin\AppData\Local\Temp\73c480c824673952bdb2ed690d8c9100N.exe
"C:\Users\Admin\AppData\Local\Temp\73c480c824673952bdb2ed690d8c9100N.exe"
1⤵
PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2192-0-0x0000000140000000-0x0000000140004240-memory.dmp

Filesize
16KB

Download
memory/2192-1-0x0000000140000000-0x0000000140004240-memory.dmp

Filesize
16KB

Download