Extracted

• • Target

    Ա취()/python38.dll

  • Size

    111KB

  • MD5

    df9f1665c7b75437790841a2b21d7aca

  • SHA1

    4a8631594dd0d3e40e70901f6b56f7ab4a6dd704

  • SHA256

    016f5c2ad31ce6d6ee68192a9937b832bb120fca7ffac71c8fc34b4c5e049f10

  • SHA512

    0e02d9af1a588de7691e7330fc16fbb51a5f9034aa7138c1e39942dbed1e21f352fde9ca31df5c5304ac79df11c49565298fdd24120e13c4bde62f0322404ad9

  • SSDEEP

    3072:RFoFeSgfuvuKg0rLIGqhjO8kWh9YWUUQqokd1vP8zsMDX:YgfnyIGq9BLYvUQOMDX

  Score

  10^/10

  metasploitbackdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    Ա취()/Ա취().exe

  • Size

    95KB

  • MD5

    3b35d89b10e561e05006e0a101154348

  • SHA1

    e2e3cfdc72eb1fe6856d84a571beacb16092a050

  • SHA256

    123328fe9a690ad5854c9e6d37ffbb38cd35af0e39c9b35e8567e914cdab266f

  • SHA512

    4b74f7d754131d66ed694eb7a96a6acd283d638ea6593df38142348ea0e22d6929882857bf9cf43f6c64f6147e9268705b685528e6c6676a079ba8402a04a50d

  • SSDEEP

    1536:pVw2chPKbuEYE+9z2wp+FavGmhMn+IhzZtzQ/FXRCyoM:PAhPKbuAs0FNmhMn+IhNS/FXRuM

  Score

  10^/10

  metasploitbackdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Suspicious use of SetThreadContext

  behavioral3behavioral4