Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
15-05-2024 08:14
Static task
static1
Behavioral task
behavioral1
Sample
level1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
level1.exe
Resource
win10v2004-20240508-en
General
-
Target
level1.exe
-
Size
17KB
-
MD5
7f44ee674f20ecd83da14cd7751d4fea
-
SHA1
f6b2302c7a0e6a42e44599179fe2d67f4d6eb8c2
-
SHA256
ae68a5099e4d3e20e042752996811c94546e8b9e6fd7dfaf6b1518fb7391c4bd
-
SHA512
e14ae59ce32f0405c2801161dd1bfd7313ce4f1d1c9153dad796fa225372966a60833550ce9b6c2cbf236cc0a912f6a22965c29c19a77d203d2b586c117594d0
-
SSDEEP
192:G5vfSYokQ5VGYddM6vddlA9eh1xOsz2F1I1g+FMJNAInkW0XxyiaAws681e3Q5Xd:G559QuYwAIm/Osz2SNWJNc3xe3jHW
Malware Config
Extracted
metasploit
metasploit_stager
192.168.122.1:31337
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4444-0-0x000001B877D20000-0x000001B877D21000-memory.dmpFilesize
4KB