Analysis
-
max time kernel
51s -
max time network
67s -
platform
windows10_x64 -
resource
win10-20220414-en -
submitted
16-06-2022 01:35
Static task
static1
Behavioral task
behavioral1
Sample
a3b14096156684a6aed44851c7c9d1fbe64e7926cbdf57317f083f0ca1ae4d06.exe
Resource
win10-20220414-en
windows10_x64
0 signatures
0 seconds
General
-
Target
a3b14096156684a6aed44851c7c9d1fbe64e7926cbdf57317f083f0ca1ae4d06.exe
-
Size
7KB
-
MD5
00444f498cad8ff2ff8f0ac20f7d5fd7
-
SHA1
061764179ddb3c19fd8044605e55b3407187a54e
-
SHA256
a3b14096156684a6aed44851c7c9d1fbe64e7926cbdf57317f083f0ca1ae4d06
-
SHA512
902e9c3ba6275fb8b3047a6b31567004ca8b0fe68f19110d424e63b04d336a0b31c8e8209c98fb6dd0c77c597b6f51e7e75ad88a753c4557a8ee945af4122fd0
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
metasploit_stager
C2
3.70.110.188:52509
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3420-117-0x0000000140000000-0x0000000140004278-memory.dmpFilesize
16KB