Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
16-10-2023 07:57
General
-
Target
5ffcefa959fec4defadc9616e63b73502fd6873f14abdce4b8fa95667b21f34e.exe
-
Size
3.6MB
-
MD5
1dfc7c9295e37d5fce9deadf22a3d0d2
-
SHA1
bfec82762df22ccd2540813bc7cb89f57d8ce1c1
-
SHA256
5ffcefa959fec4defadc9616e63b73502fd6873f14abdce4b8fa95667b21f34e
-
SHA512
1b7910e492d4319e9f18db337ba470e055e393ac8264d4530be60673d82dae1b7069c7a69977cf229efbe37cb4c9dcd2a9af917d8c6c7eef117149628f7d92ac
-
SSDEEP
98304:MllEtuUuVOLnvzARcehASNY6hrLOuWeN5KjIJNpO0bb:KML8RvASbhrquWeswO0
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
metasploit_stager
C2
172.19.96.147:10000
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ffcefa959fec4defadc9616e63b73502fd6873f14abdce4b8fa95667b21f34e.exe"C:\Users\Admin\AppData\Local\Temp\5ffcefa959fec4defadc9616e63b73502fd6873f14abdce4b8fa95667b21f34e.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.6MB
-
Filesize
9.6MB