Analysis
-
max time kernel
153s -
max time network
174s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
03-09-2022 05:10
General
-
Target
resume.doc.exe
-
Size
7KB
-
MD5
73ce6d5af73315310b394a648cb1e907
-
SHA1
4aaaa6dba21f18a4284201e79a0405cf5d6f8d00
-
SHA256
bb3aef05f9007687f06fd26eab80612e5960249a5df74fe3ef6399b7c087b8e9
-
SHA512
95f5b65f76aceeb20af76c5a3224616f2b421d5eebd2e5d328a2b32a875770545f7f1f4704d7283bf4936f704ff5626f5b03a729dc8518354e6b5609878546b4
-
SSDEEP
24:eFGStrJ9u0/6f4nZdkBQAVoaYNq9KZqReNDMSCvOXpmB:is0qMkBQVts9zSD9C2kB
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
metasploit_stager
C2
69.50.64.20:80
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\resume.doc.exe"C:\Users\Admin\AppData\Local\Temp\resume.doc.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB