Analysis
-
max time kernel
107s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06-11-2022 09:22
General
-
Target
2d2ac057e90d40cfc5b282e406656e72286ea6dc88a73493bc6d2fe17fe789f9.exe
-
Size
72KB
-
MD5
1bbde06f82f269bd3767c29346e83d9b
-
SHA1
89d45d150b8d2e977f990f8bba0ccd94ec9e2272
-
SHA256
2d2ac057e90d40cfc5b282e406656e72286ea6dc88a73493bc6d2fe17fe789f9
-
SHA512
86e67c4a40bcc7fec7ce4a8686f4e6b37295b653c82c2edd247e30336399952b1676de8a817d709b18f53224074762785067f5930c678cc43e0a4b2c7a45cc7b
-
SSDEEP
1536:IVSyb8mCqOmsHATdXBLPkrhSSRMb+KR0Nc8QsJq39:6IHAZBLMrhje0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.1.128:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2d2ac057e90d40cfc5b282e406656e72286ea6dc88a73493bc6d2fe17fe789f9.exe"C:\Users\Admin\AppData\Local\Temp\2d2ac057e90d40cfc5b282e406656e72286ea6dc88a73493bc6d2fe17fe789f9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB