Extracted

• • Target

    144eb5d99347a93b3eba1fc45f756f2a833a9eb023a062ee7745c731007d5514

  • Size

    7.7MB

  • MD5

    2e50203cad64085331e5700d30f97f79

  • SHA1

    1ab052c24ee4f172be5764472f9ba9364c9c8e1d

  • SHA256

    144eb5d99347a93b3eba1fc45f756f2a833a9eb023a062ee7745c731007d5514

  • SHA512

    207baaef535e35d206b0c3b96e62db68b5dd133f18db6dd54cf3630e680f369742aef6acf472563994e15d3db1f189ac980b85aa2fd2602fe146ed06201f8582

  • SSDEEP

    196608:NcvnSjQK8LhKn1mbdIJSHDxnSP6fzsP4oR+JP5A5:NYnSokcbdIWVglw25

  Score

  10^/10

  metasploitbackdoordiscoverypyinstallertrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2