Extracted

• • Target

    b5f13b165130351b69e94586a8ed864262664a930496b412b80d9c3cf51ec1c5.exe

  • Size

    8.5MB

  • MD5

    e90780d3da495c8ac3e0d31fa5e0af52

  • SHA1

    f04a55edf97af3a26bfad64f33d9a9a2e0d732f8

  • SHA256

    b5f13b165130351b69e94586a8ed864262664a930496b412b80d9c3cf51ec1c5

  • SHA512

    a2b6502891b69141af5085bc9d6316657118eaf9e75c86689f2ff61d2f19a2ed97115d3e96fdb26591ccdbf6020152709c2f9eb407c787d7580bbe8abbff537e

  • SSDEEP

    196608:93GDA2c4s3H5D5ySAhHj6glb97gNhR6xAnUmEK8Fccr9mq0jvK:L2twkHrpUt6ezEK8/MqovK

  Score

  10^/10

  discoverypyinstallermetasploitbackdoortrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2