Analysis
-
max time kernel
133s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
-
submitted
29/06/2023, 23:45
General
-
Target
themod.exe
-
Size
72KB
-
MD5
380ce030edf017e1a348682b487d4049
-
SHA1
2bef10a8a0f2d5d93e9e5de78b82907f8f623079
-
SHA256
8a855f3d8dbe57672eac3b9f8d4c15f1dc201bfe3ba93582f9c66cd582857c3c
-
SHA512
0c6b4224fc8fa6b324d89f84d7febf7d0dcc7e66eb53be16b98bd9bedc1f234f2de9fbc45512ade5d6f3b8c29c3a0307806ca5eef293125842f1aaf468643df3
-
SSDEEP
1536:InemG+PHYRPXnItGHMmqGMGF0/FRj4VSz9oZMb+KR0Nc8QsJq39:aemI3+z7u0DiSz9Qe0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
138.68.103.181:4004
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\themod.exe"C:\Users\Admin\AppData\Local\Temp\themod.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB