Overview

overview

10

Static

static

3

113915cdd2...1f.exe

windows7-x64

10

113915cdd2...1f.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    134s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20-09-2024 06:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    113915cdd257cdf611053c1d08f8b20f216a83b212dd1dc610efc2dc724c701f.exe

  • Size

    111KB

  • MD5

    1d09ccd66e5f3ac0b40475e353a35c06

  • SHA1

    a65591e7318b734b517e14b23d3f1a473f3f0199

  • SHA256

    113915cdd257cdf611053c1d08f8b20f216a83b212dd1dc610efc2dc724c701f

  • SHA512

    7a4456ab6721af1c4d5acad4bec162bb94e79737df545de4862dd464ce6a78291c2a38a87aa5e404182a488eb06dcd07616c415313b3bc4dd1e970b966d7fac8

  • SSDEEP

    3072:sGX1SY8SpIbSeHlOGP3qqTTo+rtX1IA/r/R1bI3:sM5IbSIT3hr5n1bI3

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

43.136.32.239:4433

Signatures

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

Processes

  • C:\Users\Admin\AppData\Local\Temp\113915cdd257cdf611053c1d08f8b20f216a83b212dd1dc610efc2dc724c701f.exe
    "C:\Users\Admin\AppData\Local\Temp\113915cdd257cdf611053c1d08f8b20f216a83b212dd1dc610efc2dc724c701f.exe"
    1⤵
      PID:2724

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2724-0-0x0000000000030000-0x0000000000031000-memory.dmp

      Filesize

      4KB

      Download