metasploit | f251768f2c40c06729bfed16ac6310f5f5c9dd6a236cbe8239a2cb16810ae24c | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
18-11-2024 12:56

Sharing

Report Analysis Logs

General

Target

f251768f2c40c06729bfed16ac6310f5f5c9dd6a236cbe8239a2cb16810ae24c.exe
Size

15KB
MD5

668c03a107e49387e5fd22c9748ff16d
SHA1

59fbf420e00ad1a7ff5d17c6545423900327d4c4
SHA256

f251768f2c40c06729bfed16ac6310f5f5c9dd6a236cbe8239a2cb16810ae24c
SHA512

b84e746c5ebf68c6071466c177801a62a27687b132b231d470fa4553f733ff9053f9d402b9f9ea4104139214730bc7d6c5e4364d6e3a90605ceb3c42fb8cc432
SSDEEP

96:5NW2nVVyXhorAlhNHc2BywoAJPQYi3K1DntAfdomPdHWsyz7w7bp:risAlh9pBpbtQYQK5YouI1s7bp

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_bind_tcp

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit
Metasploit family
metasploit

C:\Users\Admin\AppData\Local\Temp\f251768f2c40c06729bfed16ac6310f5f5c9dd6a236cbe8239a2cb16810ae24c.exe
"C:\Users\Admin\AppData\Local\Temp\f251768f2c40c06729bfed16ac6310f5f5c9dd6a236cbe8239a2cb16810ae24c.exe"
1⤵
PID:2124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2124-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2124-1-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download