Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
29-10-2023 11:42
General
-
Target
putty_v4.exe
-
Size
1.4MB
-
MD5
bf84c277f02474f6191f861ef7b29757
-
SHA1
c3afec5947ec3dfa5f5e5bfb593d315ac0dd9315
-
SHA256
207ae6c439d45ec4e2d0a2d200202491208d9a744b902611c291bdaa0ff7150b
-
SHA512
3acba3037741f53c741f2e589e054965f95d68ed31725b575afad81792c9ca67e705eb92bf08f60f1f152a5623e3d3428fb3b730bc0d300f83c6392daa2d3c8f
-
SSDEEP
24576:qNbP9SNg9nmKu2HhIYjAY6RTVSTPkSnexozZTQAnTWjYIZTbRFPUN0gLuweI:8TRnU4/FQAqFxfPka
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.45.241:7777
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\putty_v4.exe"C:\Users\Admin\AppData\Local\Temp\putty_v4.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB