Extracted

• • Target
    91435e7360a5b7f891c55b1977c2d0662343cbbbf90793f62b908adb5372c479
  • Size 30KB
  • SHA256 91435e7360a5b7f891c55b1977c2d0662343cbbbf90793f62b908adb5372c479
  • MD5 635d42260f162f398c751fd66cd19a6b
  • SHA1 a65121ac867ae8a257583f45e5baa75e0059eaf1
  • SHA512 4480ad3f0c45b828d97a604bf3fca9090f61f89522279b379a6b8300e661f70af8665dc38c4f1d253dd98e53ff57f9d1fe468165a208d2da85e187a24e008283
  • SSDEEP 384:XrUQiijMCyUNfy0X9MQ1dAB2JnqdFvdcXDZ4JHysUFNyAmL4/y8R9YS19U:wzijQUNa1QvAB2lqFcXOJHlLk5ASDU
  • TLSH
    T14CD23B8A639218DEC91ACAB0F1E79E34B571FDA518315F3F0210D6750F293912ABA71F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoormetasploittrojanadwarepersistencespyware

  • Family: MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2