Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
22-05-2024 11:41
General
-
Target
dingding.exe
-
Size
72KB
-
MD5
75d75fc725bbf8efad750d531e1fa39c
-
SHA1
c730f002167f68193e7517edc6716ff9e2d803c3
-
SHA256
a5998207540cb63eff9b9f9caa736c5f86aed405940b9b87366f69577499d3c2
-
SHA512
ea2a7ffcf73b7729cddb89815e8a5ea3fbbd9e3ae0cd7e21f92a07ce6ecdf1520d91ea55dde54aa2fc27b8eb9d4e9a5f5c9213673d3a0c8ac4f62e96dc874c0f
-
SSDEEP
768:IwLUd/KmyM5ZDhVumqBuKak666RB9zSW+pr3k4oPCHSckzCScx4qXfb+KRBaTNcj:I7imyMpkmc6bRn34KMb+KR0Nc8QsJq39
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
110.42.189.52:2769
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\dingding.exe"C:\Users\Admin\AppData\Local\Temp\dingding.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB