Extracted

• • Target
    2373cc555f928a1e26b568353eddd69bf24883d5d3bb562793d8a8ddadc562aa.exe
  • Size 7KB
  • SHA256 2373cc555f928a1e26b568353eddd69bf24883d5d3bb562793d8a8ddadc562aa
  • MD5 17cfb48e3bc11b1e221158cc2c478404
  • SHA1 2f8040114c26c5ea237ba02b278263d40e8a7f91
  • SHA512 22cee362ec0631f8a67f7f4a91991fbac2a7abb82d08a49cfe9919fa45c7d1e99b8e6dde0b1b0a3965b060a9f4c0a36efe3ec324fbd167f361064a45158a7ecd
  • SSDEEP 24:eFGSG9wSsUI/mMy58XZh9h9ClfAh54ejJPIAJAj4up+:iG+xxnyeXZh9hMlu54MJE4b
  • TLSH
    T11DE130A362365CF7F6392BBC41439B8660FC273002D31B494A68044A5192A18B8A4F93
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordiscoverymetasploittrojanadwarepersistenceransomwarespyware

  • Family: MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2