Analysis
-
max time kernel
152s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
14-06-2022 05:05
Static task
static1
Behavioral task
behavioral1
Sample
reverse.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
reverse.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
reverse.exe
-
Size
7KB
-
MD5
835e6f1ae3b45de4d61639f26a678fe8
-
SHA1
3dd088cf9dfe693888037de744104de394c1f085
-
SHA256
9b54f0a2364286a21fa20d02dc02ebeb6b13f8ccaf12ae2fbeaf40350ae6c3e8
-
SHA512
4bebee055add9ea31964d2c97672a7c66e7910afd1a67c6338f963d6e4a718dddb8984b6b7bd39f6aa73ef09a0714765b5c6b864eac9ca8340954c1184151718
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
metasploit_stager
C2
185.247.118.91:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2256-130-0x0000000140000000-0x0000000140004278-memory.dmpFilesize
16KB