Analysis
-
max time kernel
136s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
15-09-2022 15:46
General
-
Target
calddera.exe
-
Size
245KB
-
MD5
6efd990a26f728971b70137e69864e27
-
SHA1
8649cf0e553e835b7372b3a6a17cece9b6ab6c74
-
SHA256
022baecd82f871abb9a1b4022c8f1e5be30edeb82e1eb7bca474539c8bf508f3
-
SHA512
573283516acf97f7b37b113e31c55a7fd90e90f514e8b78eecec781d6f6166b9e985bda2306d6858ebddc38ccc352ab2393ab7464714a2c7087fa7a5229d506c
-
SSDEEP
6144:7qGdXu6w+0Nc8QsOks9/bkgXrf9ha8DYKFZZFNuj:Hlu6pbks9AgbfvqEZ2
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\calddera.exe"C:\Users\Admin\AppData\Local\Temp\calddera.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
196KB
-
Filesize
263KB