metasploit | bd597b66a1aa68ee81b1e75668d38185f69f8379bcd5455a2176e4972aa0d0c1 | Triage

Analysis

max time kernel
28s
max time network
18s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
17-11-2024 09:41

Sharing

Report Analysis Logs

General

Target

bd597b66a1aa68ee81b1e75668d38185f69f8379bcd5455a2176e4972aa0d0c1.exe
Size

7KB
MD5

ce220e4e90ef7d834f5d6a619e42bc9b
SHA1

953a38644ad2b07746e3bb26861860adaba467bd
SHA256

bd597b66a1aa68ee81b1e75668d38185f69f8379bcd5455a2176e4972aa0d0c1
SHA512

256ac966c7608e1de5f8a7a489ab087a7e7d9b52e615bed576661299384e28a8b4af5f2737c003d86b756e596a1bc3cee77359073b94deaa66de4980695c9819
SSDEEP

24:eFGStrJ9u0/69SSJmnZdkBQAVJnqBzVZ38ePXaKkGyiawSXpmBv:is0/SJ+kBQxzb3xPaKkGyiaVkBv

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit
Metasploit family
metasploit

C:\Users\Admin\AppData\Local\Temp\bd597b66a1aa68ee81b1e75668d38185f69f8379bcd5455a2176e4972aa0d0c1.exe
"C:\Users\Admin\AppData\Local\Temp\bd597b66a1aa68ee81b1e75668d38185f69f8379bcd5455a2176e4972aa0d0c1.exe"
1⤵
PID:2692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2692-0-0x0000000140000000-0x0000000140004318-memory.dmp

Filesize
16KB

Download
memory/2692-1-0x0000000140000000-0x0000000140004318-memory.dmp

Filesize
16KB

Download