Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
30/12/2023, 20:59
General
-
Target
1c58c3282dfbd01a1dce49e13f0c79c6.exe
-
Size
72KB
-
MD5
1c58c3282dfbd01a1dce49e13f0c79c6
-
SHA1
fac46ba6cc3241b8c728f9b091af2f9faea610ca
-
SHA256
3f1ffd76339e3e888b2c279abfa08b36ed99295758d63a1f82bb670d72f5d381
-
SHA512
fe5138c7c1f68efc4e03f3d1ea3b7ce42a1aae536548fc74c16ff723a82078cbad417970ef0a4ed7d80a24c675200024a771498801bbf3bcb0a555f8cb6d59e8
-
SSDEEP
1536:IXVuthSzTcKCv2ykP6h0vpbBvhMb+KR0Nc8QsJq39:ayucKCOykyhklvhe0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
90.147.42.34:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c58c3282dfbd01a1dce49e13f0c79c6.exe"C:\Users\Admin\AppData\Local\Temp\1c58c3282dfbd01a1dce49e13f0c79c6.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB