Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
23/08/2023, 21:44
General
-
Target
c4b30b4e341a152a6ea06ede7e8d605cd9247b94d95b48949c82930079af6b7f.exe
-
Size
3.3MB
-
MD5
022e9116d6a1411c84fa28a08cbc0744
-
SHA1
966d01fddbc2cbd57e57163aa202498176377d00
-
SHA256
c4b30b4e341a152a6ea06ede7e8d605cd9247b94d95b48949c82930079af6b7f
-
SHA512
b984be38ead77bbb9a88b036323517e12e451aa6c946ac13862c95d3bf30488a019c13a8b3b9a1903c33b1975f2cfe00abaa99c1a57f929ee923aaec366137c0
-
SSDEEP
98304:UWhlXBOBfK9kyHVx1hUIQjClDPrPmZ/2msm:h/lxUIdrruZhv
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.84.95:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c4b30b4e341a152a6ea06ede7e8d605cd9247b94d95b48949c82930079af6b7f.exe"C:\Users\Admin\AppData\Local\Temp\c4b30b4e341a152a6ea06ede7e8d605cd9247b94d95b48949c82930079af6b7f.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB