Extracted

Extracted

• • Target

    0f7fff304e0fe1a4bc0ca5eef9d34cdb6d2b43a9.exe

  • Size

    17KB

  • MD5

    f8a9322518123f8dfa7e2e4b02e21656

  • SHA1

    0f7fff304e0fe1a4bc0ca5eef9d34cdb6d2b43a9

  • SHA256

    ffea9176cfb8f8c009dfc8c1c4db6385e0155497dc42cd0e3dd356371c4089b8

  • SHA512

    fca2e548bb333ac59a4803ab783c5b4bfb466c5f7f59bcb787675db7c4444beafae9fe97beeb272c680f1573f204b864cd06a95cfcfb863e15f4c489732d3bae

  • SSDEEP

    384:OEEoLO56ayzcMj+uZvAc00EUGvQPCcmL6neqlkXMj/79Wx:RE8O56lcVuGv0TPCcfexX+79Wx

  Score

  10^/10

  metasploitbackdoordiscoveryexecutiontrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2