Extracted

• • Target

    krpt.dll

  • Size

    1.3MB

  • MD5

    8acdc3de7aee7d7d7242d42e7e5254be

  • SHA1

    d0be878a474170584ba3cfdfd19b22baa81f19df

  • SHA256

    53acfefcda2e6e3f31786a2e2c7fa5bcb83380e284d919f03bfc6d31a6b3b76f

  • SHA512

    13f541bda8961d649ec3ec1351413281fe2e340f17bce09a3c7b09a411f0b27fa7d0e5693399032ca725ef598c84096bfcc5d0f5775121fab7b89f323c0c1db0

  • SSDEEP

    24576:FrqYkIXkv6WMVqgF7687IMFAO1KlyOQpppppppppppppppppppppp4KVmsdzaA+5:F+YB86Wr/2ImAJy

  Score

  10^/10

  metasploitbackdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2

• • Target

    wps.exe

  • Size

    1.0MB

  • MD5

    8258fb211075d889b4e3e15458b2a9c5

  • SHA1

    6620a898c2899b346ee6a524b09c306775e44706

  • SHA256

    b814a4c506ce2dd3920990ecfcb106b7650529be39fe7513373073c5274e62b3

  • SHA512

    603cef3ad12ccf092b4cf49315da79f1893775d188c6c7d0015932f9e0ad9030d7871475b7dd202dad0a2198ecde654b73dd819175d2a61c8a64bf32de7693f2

  • SSDEEP

    24576:P7QXeEKjLIRwIp8wciIJZou3aF8Sj+1vDXjU/5:jQuEoIG28wcmF8Sj+B/K5

  Score

  10^/10

  metasploitbackdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral3behavioral4