Resubmissions
16/12/2023, 19:12
231216-xwpneseaa81016/12/2023, 19:10
231216-xvtwraeaa71016/12/2023, 03:02
231216-djkn6abfc210Analysis
- max time kernel
21s - max time network
32s - platform
windows11-21h2_x64 - resource
win11-20231215-en - resource tags
- submitted
16/12/2023, 03:02
General
- Target A5-leaflet-password-advice-for-ALs-v2.exe
- Size 72KB
- Sample231216-djkn6abfc2
- SHA256 ae16297eb464164e185569833ae2c73d753b21901b876992ffbf12067a518f80
Score
10/10
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.64.2:5555
Signatures
- MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\A5-leaflet-password-advice-for-ALs-v2.exe"C:\Users\Admin\AppData\Local\Temp\A5-leaflet-password-advice-for-ALs-v2.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3508-0-0x0000000000520000-0x0000000000521000-memory.dmp