metasploit | 39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a | Triage

Analysis

max time kernel
147s
max time network
148s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
07/12/2024, 03:20

Sharing

Report Analysis Logs

General

Target

39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe
Size

3KB
MD5

68852f4183e4b04ba78ed1f2c2124b7a
SHA1

5aa806c168daaee3333f0a4090c4f2f3199cae21
SHA256

39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a
SHA512

2ed2220bde3f7bbd35582d865a43dcb580a1fc29741e8f2b302faed4615296acb8301f2cc8c664b2d336794ee411bc9c1e7473f863994f51967a6a488798f8b2

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.9:4444

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit
Metasploit family
metasploit

C:\Users\Admin\AppData\Local\Temp\39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe
"C:\Users\Admin\AppData\Local\Temp\39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe"
1⤵
PID:1620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1620-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1620-1-0x00000000002E0000-0x000000000037D000-memory.dmp

Filesize
628KB

Download