Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29-03-2024 14:02
General
-
Target
a53a414b2d456f7802d1cfef33058f1b70e049ab666cf0ad638fc38a115714f2.exe
-
Size
1.8MB
-
MD5
a428a2fad5ad43411b4ee1a825857957
-
SHA1
a2374a70c5c3db47695aab6dc856dbfe0942cc8e
-
SHA256
a53a414b2d456f7802d1cfef33058f1b70e049ab666cf0ad638fc38a115714f2
-
SHA512
06cab95ff5638d2fde9b551898fb120b874cf929b1890f4dedfa0840cfe17cf7afc7e706439e46eafe17139eda24bb44bea23d69f50cdebee52272c6a88c855a
-
SSDEEP
49152:EORXjhjuyXlt4+3oNBGsCornEsYwmve86irCrHEOP:FRXtjLVt4tJ/pmNHerv
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.110.115:9999
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a53a414b2d456f7802d1cfef33058f1b70e049ab666cf0ad638fc38a115714f2.exe"C:\Users\Admin\AppData\Local\Temp\a53a414b2d456f7802d1cfef33058f1b70e049ab666cf0ad638fc38a115714f2.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/5044-0-0x0000000000400000-0x0000000000465000-memory.dmpFilesize
404KB
-
memory/5044-1-0x0000000000730000-0x0000000000731000-memory.dmpFilesize
4KB
-
memory/5044-2-0x0000000000400000-0x0000000000465000-memory.dmpFilesize
404KB