Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
24/12/2023, 22:47
General
-
Target
16d75214a81ff1c371e50bf51ea38f36.exe
-
Size
2.1MB
-
MD5
16d75214a81ff1c371e50bf51ea38f36
-
SHA1
80c35fc24019eab11f93856c2c3d2d7e475336f7
-
SHA256
3870b97bd1ecd0a097a6b09cf95f279c5d0cefdb34ad827d60e9a3374145e963
-
SHA512
611db0362c328ad2c1d1a6d6e7a2e38094e483b6396b47ef82337eb7fec123bba5d91e9da2c80b80d456a2fd63efcbf39d3b625be3b43df8200dd65586dae9bc
-
SSDEEP
49152:RKEE/nIxbeX+CN+JmVAjDwwkkJ4OSgPQ/ManCDXmH:UE2IxFCQJmVAjEFPOSg4/Man6Xm
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.6.174:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\16d75214a81ff1c371e50bf51ea38f36.exe"C:\Users\Admin\AppData\Local\Temp\16d75214a81ff1c371e50bf51ea38f36.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB