metasploit | 88cfede42188d89c02902431f688fd90b5947eb2155f6b40a1f75f3cfc010e2b | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
31/12/2024, 09:08

Sharing

Report Analysis Logs

General

Target

coba186s.exe
Size

256KB
MD5

93bac4f33045a02c34e48ef3fdffdb2f
SHA1

17225c1f602f19396f4aa2628deba1fe9680e3c1
SHA256

992b42d1d6d4685e2821e7316ea403aed10b38bfe1879a0eca241a23f74d0269
SHA512

0638a120ee9e131d0ef91111b75ed106d16cf87a79a21ebf388d360dd5d8840ca1c63b3c87d58704b16e3807eed942220980d8c01afe9db8cf0b4c547ef025e9
SSDEEP

6144:NGxnghuicwAAMWrrloCwLackBYDIePeAOemHJyg9Fws3b:OghuicwASloCwLa4IemcMws3

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://1nevadasports.com:443/NDQy

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit
Metasploit family
metasploit

C:\Users\Admin\AppData\Local\Temp\coba186s.exe
"C:\Users\Admin\AppData\Local\Temp\coba186s.exe"
1⤵
PID:2268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2268-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download