Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
19-09-2022 08:13
General
-
Target
3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0.exe
-
Size
416KB
-
MD5
1c899730d4b08554daf3c2e0a75a7f3a
-
SHA1
3bfb20580f1c6d61b12688a8df5943f315fc18dd
-
SHA256
3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0
-
SHA512
2cac01881456c9e78d3e76cabb4b18fc108a8a5a6c884692bc34c4c2806c31cfd3bcd65c7cf5e178e0ac65f40bf6f88c41ec50e0a8bff3fde7aa092273277e85
-
SSDEEP
12288:pbWm23htV4dEvM7IF7MwvFg5exc9X2qijc3rdtT:pbWm2336EvYGtg5ALqb
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
79.138.104.162:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0.exe"C:\Users\Admin\AppData\Local\Temp\3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
2.0MB