Extracted

• • Target
    http://wayback-fakeurl.archive.org/yt/3BlhOQN6mRw

  Score

  10^/10

  backdoordiscoverymetasploitpersistenceransomwaretrojan

  • Family: MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops file in System32 directory

  behavioral1