Analysis
-
max time kernel
158s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
30/10/2022, 00:51
General
-
Target
e9ffa4216e130026bda8fbcabf761b8f378939daf133601b6f3d25ae72393f3b.exe
-
Size
50KB
-
MD5
83f4e4796b55254b4ae0aeb1779bfd34
-
SHA1
f65ecba954844c5f329f2ac7a6d371b4d627659e
-
SHA256
e9ffa4216e130026bda8fbcabf761b8f378939daf133601b6f3d25ae72393f3b
-
SHA512
33e470056ed4a4d3f733700b0ef3cfe631cb3db329477e7a7ad95b56e95853bef01d13db7c4ce7c58a0f3f8ba9ce664e297ef2779e7ae7eb5d8a26e6d27b8d5c
-
SSDEEP
768:VIHQF1YCzsFmvrPaNqVPJKW3cEoxgtLPILaNilcpXcKpUu5ovyavoc:qw5bzJPYm1P8a82phpUYiya
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/call4_dword_xor
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e9ffa4216e130026bda8fbcabf761b8f378939daf133601b6f3d25ae72393f3b.exe"C:\Users\Admin\AppData\Local\Temp\e9ffa4216e130026bda8fbcabf761b8f378939daf133601b6f3d25ae72393f3b.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3592 -s 5722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 3592 -ip 35921⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
604KB
-
Filesize
604KB