Overview

overview

10

Static

static

10

bdf2bf7041...5f.exe

windows7-x64

1

bdf2bf7041...5f.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    90s
  • max time network
    49s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-07-2024 03:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bdf2bf704188f8852bfbcd51d5c1875f.exe

  • Size

    1.6MB

  • MD5

    bdf2bf704188f8852bfbcd51d5c1875f

  • SHA1

    7503d8c8b16dbdfd3b4301412e4a3f5ed31bd167

  • SHA256

    f0fcc59a4322b4842f40ce4926348d2d88d6cec02a53974ae5e5f1b8a6dbda7b

  • SHA512

    2728c8217b6c7f64b521f4c3c0a56381de70b351f1fa92fc8b0803034802b5d466b6d91ed6ef392030e13352bfd33b650c6d19b42e9c1ec6701c699b77bede4f

  • SSDEEP

    49152:Plp9tHfYoEaTSiz23THT3WSMpDgj/qB0Rj6KIeVSc/zui+:PX/LEQkj/qBk6K2c/ii+

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.1.10:443

Signatures

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

Processes

  • C:\Users\Admin\AppData\Local\Temp\bdf2bf704188f8852bfbcd51d5c1875f.exe
    "C:\Users\Admin\AppData\Local\Temp\bdf2bf704188f8852bfbcd51d5c1875f.exe"
    1⤵
      PID:5088

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5088-0-0x0000000140000000-0x000000014019B000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/5088-1-0x0000000140000000-0x000000014019B000-memory.dmp
      Filesize

      1.6MB

      Download