Extracted

• • Target

    dcc66765876057493a7e4683847b1195680d6693aa0584c0570b0f349cafd800.exe

  • Size

    5.2MB

  • MD5

    ff6312e5fe35c9b16a6b8609d3d4aaa0

  • SHA1

    6fb6404cbd50c210bf05018e11bc47c4d9844bea

  • SHA256

    dcc66765876057493a7e4683847b1195680d6693aa0584c0570b0f349cafd800

  • SHA512

    6afd1adee7fb30aaad87e93ed48993b6899d749321538dbe519a5eec27f726da44b36c73ca026aac64a2b48a9f252b83a6b34a718d3c2c8ba474665930309886

  • SSDEEP

    98304:VXj2tVJX06hpNT4We2Ifr4b4rjtLIy4ngdISBvmr/zTul1:VXCGG54VrQw+qmSBvMi

  Score

  10^/10

  metasploitbackdoortrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2