Extracted

• • Target

    7337f39a5ba72a7f74cc8915d26e84b8.bat

  • Size

    7KB

  • MD5

    7337f39a5ba72a7f74cc8915d26e84b8

  • SHA1

    ec768217f55dc32ccb2b6dcf82cbf0fbaa78913e

  • SHA256

    9b6a8e674502750d003fd795b210f842e85299e8f80484d74362152146a99570

  • SHA512

    3fe77588664ed994dd38cc4c7f8f71b64bd83de3c97b443996ee7fe3cc2cde187b42be7877908cd26aac9b058bbc2764d53bd523022aef5103deaac21f85227c

  • SSDEEP

    192:+n2jh1hqT2BkbI5ofdiPcklcNRbJraXUjeBPjcF6hdC:+n2jh1hs+kbqoVaPlERIkSBr3hdC

  Score

  10^/10

  metasploitbackdoordiscoveryexecutiontrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2