Analysis
-
max time kernel
153s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03-09-2022 03:01
General
-
Target
1b780b4355cccc3c0f850bba1486db1b.exe
-
Size
195KB
-
MD5
1b780b4355cccc3c0f850bba1486db1b
-
SHA1
65305aeacf482d9495b68eec61c1ef64e9b0446c
-
SHA256
757ecb1a43db6d18e1c1797157cdb5253baeb32d8c94adae7b20bd5266ec1f9b
-
SHA512
d440e834312704b65409f4f551d34f523009ad0a1371c3687c9f8e41a5aa30212a08a931161a6a1a2818ee3ed33f68c4fe0e272c232366f333f7dabd8c450654
-
SSDEEP
3072:dryEFdApaWVzPCWdEcCb6Xc8F9u7CC/CaFwT8FJ2AB2O9D5pZa9uD6Vdyhk7:FRFdAUEzPib4tF9EDCam2BXnwVf7
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
188.119.112.85:443
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1b780b4355cccc3c0f850bba1486db1b.exe"C:\Users\Admin\AppData\Local\Temp\1b780b4355cccc3c0f850bba1486db1b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
76KB
-
Filesize
580KB
-
Filesize
172KB
-
Filesize
196KB
-
Filesize
1024KB
-
Filesize
380KB
-
Filesize
1024KB
-
Filesize
128KB
-
Filesize
196KB
-
Filesize
1024KB
-
Filesize
1024KB