Analysis
-
max time kernel
119s -
max time network
135s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
24-05-2024 05:41
General
-
Target
ranger.exe
-
Size
72KB
-
MD5
b3ba78b4f562d45a5bda794b03f2e214
-
SHA1
720608bd51cdf1f346b0abf3eb8bc226780a34ec
-
SHA256
948a274743d75bf229fe26ad36fb41d64914e349341513aa2f5fb6b48e5c1eeb
-
SHA512
0f98b51fb3ef7e08962a66827444387b3612f97e78c1261e3c3283f84a35c0693c56188297731b3dafc5532afe60f49f5f13d351aa1ce3372797088d248bef6d
-
SSDEEP
1536:IDNVZReFTL19sE42CAYIgWlAlQtMb+KR0Nc8QsJq39:KRU39DwQte0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
185.228.139.123:80
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ranger.exe"C:\Users\Admin\AppData\Local\Temp\ranger.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB