Analysis

  • max time kernel
    136s
  • max time network
    171s
  • platform
    windows7_x64
  • resource
    win7-20220718-en
  • resource tags

    arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
  • submitted
    31-07-2022 04:50

General

  • Target

    779e77b1b4f0f9c827550ea4abda05214de137e6bf3ae255beac76e4dad73b79.exe

  • Size

    7KB

  • MD5

    cf68c0189d5367a5baab4c748123ad60

  • SHA1

    05ef6af3e32c9ac65245a194009f129f1804c913

  • SHA256

    779e77b1b4f0f9c827550ea4abda05214de137e6bf3ae255beac76e4dad73b79

  • SHA512

    592dae4b88c08ce884c17cae31e3ac0936f33b30dd3a1a307a7c402cf49a06b46c320e592b502b06a57745b9e9a998219dc788062d16a21c27322cdc660fe445

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

187.74.75.191:3537

Signatures

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

Processes

  • C:\Users\Admin\AppData\Local\Temp\779e77b1b4f0f9c827550ea4abda05214de137e6bf3ae255beac76e4dad73b79.exe
    "C:\Users\Admin\AppData\Local\Temp\779e77b1b4f0f9c827550ea4abda05214de137e6bf3ae255beac76e4dad73b79.exe"
    1⤵
      PID:1452

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1452-54-0x0000000140000000-0x0000000140004278-memory.dmp

      Filesize

      16KB