Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26-01-2024 10:37
General
-
Target
77227a84a225e61a6d51d278079e90e1.exe
-
Size
1.0MB
-
MD5
77227a84a225e61a6d51d278079e90e1
-
SHA1
b872ed09e4b45863e2bbd63b7e2d403058554392
-
SHA256
5979c60b058063a0f1b503e1220d220a4a3a262ea9c6f9d34b67d3a3a575d101
-
SHA512
7f1da23ba936bcdaaabc0795a16de607a084f6ac320fcd4962afd21c28c9270e235753cf2b22793ab14896941e8dcd6873005944ce31c1ad7944eb2b23eeb543
-
SSDEEP
24576:KNjPoavlb3o9KgGBWv2E2MwNLHN6cCFa80IgvrgI9/GB+fDj:KJoaFNJ4v2xLtcFa8015/mu
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/download_exec
C2
http://216.128.176.111:1280/esM7
Attributes
- headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
UPX packed file 7 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\77227a84a225e61a6d51d278079e90e1.exe"C:\Users\Admin\AppData\Local\Temp\77227a84a225e61a6d51d278079e90e1.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
16.0MB
-
Filesize
1.9MB
-
Filesize
16.0MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB