metasploit | d56bfaf953a048a4fd880b78bf4ba65e828034f34cb05ce8af933a72db192bc2 | Triage

Analysis

max time kernel
15s
max time network
16s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05-12-2024 05:11

Sharing

Report Analysis Logs

General

Target

d56bfaf953a048a4fd880b78bf4ba65e828034f34cb05ce8af933a72db192bc2.exe
Size

124KB
MD5

c6bcbc73b09ece2ca1642b59b00a0186
SHA1

7bcd9c5c794918c43721d7b3f3f19da8a824e93a
SHA256

d56bfaf953a048a4fd880b78bf4ba65e828034f34cb05ce8af933a72db192bc2
SHA512

66cd49736cf0348ed23bbcba9e53ff16bcf17de52de091d4b0086fbc5eed1e3d23db0f08d0050a31d4da6c28961c4205c136c5b4eac03060e2bea96d27dc54ee
SSDEEP

1536:IMO1HILNg8XVqhZdGaP+MesUMb+KR0Nc8QsJq3X:OEhpSesUe0Nc8QsCX

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit
Metasploit family
metasploit

C:\Users\Admin\AppData\Local\Temp\d56bfaf953a048a4fd880b78bf4ba65e828034f34cb05ce8af933a72db192bc2.exe
"C:\Users\Admin\AppData\Local\Temp\d56bfaf953a048a4fd880b78bf4ba65e828034f34cb05ce8af933a72db192bc2.exe"
1⤵
PID:2692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2692-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download