Analysis
-
max time kernel
156s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12-10-2023 03:02
General
-
Target
reverse.exe
-
Size
72KB
-
MD5
d0159349934aeb698f8c74f0f105ad82
-
SHA1
66135c4184120f051719a470336edb49caa3dcc1
-
SHA256
a12f989c4d2259bd58487c97cd17fe3d36b2bd91d4a0ace9f3dd07cb8f8dd686
-
SHA512
10477dd83299ba070dcea1024115b42e69ac2ae3c320a2967f1cf5367c23f1bbea0762222b562245a960f38ea5859822f2f1fdf91516d6730c2e84d6f1c43b98
-
SSDEEP
1536:IgAP1X5Wr628C6KZq9e8Mb+KR0Nc8QsJq39:XAP/W22DY9e8e0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
34.142.247.189:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\reverse.exe"C:\Users\Admin\AppData\Local\Temp\reverse.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB