Analysis
-
max time kernel
105s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
14-05-2024 16:15
General
-
Target
af81446395e463606eeed2bc9eb4ddcc86f98ea4b41cce7430878679d161b54c.exe
-
Size
4.5MB
-
MD5
575ad81ed5cf30393bd02d5da1bc70fa
-
SHA1
626817ec4565f5804447d80747ebb043e57f0155
-
SHA256
af81446395e463606eeed2bc9eb4ddcc86f98ea4b41cce7430878679d161b54c
-
SHA512
6c1eee2f84a77c2d397462095d302f0cfb4b0e921087f4fa74c426308ddd95cb345a5c81160cbcb6e5d49cf0ceb128ff340d4f4250dc492990176dfd644b95ff
-
SSDEEP
98304:2Xr3ay/mq1BjDtkQ079UKTzY32d6xayyNzped9HziQTQwFYT:27ay+q1HKUKcZxayyGd9HFkvT
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.231.135:728
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\af81446395e463606eeed2bc9eb4ddcc86f98ea4b41cce7430878679d161b54c.exe"C:\Users\Admin\AppData\Local\Temp\af81446395e463606eeed2bc9eb4ddcc86f98ea4b41cce7430878679d161b54c.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1492-0-0x0000000000400000-0x0000000000491000-memory.dmpFilesize
580KB
-
memory/1492-1-0x00000000006D0000-0x00000000006D1000-memory.dmpFilesize
4KB
-
memory/1492-2-0x0000000000400000-0x0000000000491000-memory.dmpFilesize
580KB