How to trace a reverse tcp Trojan?

[Deleted member 2437163]

You might say whoa, but someone I must know tried to prank me by compromising my system using a Trojan. From my experience, it seems like a metasploit reverse connection, assuming it's TCP(cause that most found in tutorials), how to trace back the connection and find the "attacker"? Or is it can be made trace proof??!

 

[Rdslw]

simple launch it in sandbox and scan network using wireshark or other
https/superuser.com/questions/877879/how-do-i-find-out-which-program-and-process-id-accesses-a-given-ip-address-in-wi?utm_medium=organic&utm_source=google_rich_qa&utm_campaign=google_rich_qa
you will see where it went, if your attacker have any
ill intent, this will be reverse proxy on someone else PC.
you cannot check anything that is not running, so it might be a problem if you cannot run it again

 

[Deleted member 2437163]

I didn't see any TCP connections!! All I saw was standard HTTPS while running!! Wait, there is no reason for that https connection!! Is it the payloads?