Extracted

• • Target

    811edb26190197000a40a52e71b197551ef444fa600836d117852f91e44a0a94

  • Size

    4.0MB

  • MD5

    5903c117f48011c0df6606003e47c4f5

  • SHA1

    16c49da798dc08bdf567a08454bcbbb790920441

  • SHA256

    811edb26190197000a40a52e71b197551ef444fa600836d117852f91e44a0a94

  • SHA512

    e10c2aadc80d928aef0d377ea8b226eea519d757ba04b0326a1e0830282b98851f5d1e82e1a2f5391021e8292c0aade9a7b69c983f38eca5936228daf859da8b

  • SSDEEP

    98304:4gqIctyETh4cCpI0kwJF4vY5SK63dzBEZht5f/LyXtcH/:Pqtyih9Cawjr/6NAjyX

  Score

  10^/10

  metasploitbackdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1