Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27-05-2024 09:11
Static task
static1
Behavioral task
behavioral1
Sample
5e13510efdb5af62922c9ae8158b7faca6fdd0149bc7de1d868bd2b2769f665d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5e13510efdb5af62922c9ae8158b7faca6fdd0149bc7de1d868bd2b2769f665d.exe
Resource
win10v2004-20240508-en
General
-
Target
5e13510efdb5af62922c9ae8158b7faca6fdd0149bc7de1d868bd2b2769f665d.exe
-
Size
1.1MB
-
MD5
71eb9d46a3037a5fd879fc15867f2f9a
-
SHA1
2b9cef4289da2aea7519ea28da533010e39a3be9
-
SHA256
5e13510efdb5af62922c9ae8158b7faca6fdd0149bc7de1d868bd2b2769f665d
-
SHA512
479561b9cc5ef29b1fb7312818049fb87557667292d21e7964e65ff43abf901b28c4aa0684015930a95c6c9400d2530ab38bace0b40f449eddad57129a004730
-
SSDEEP
12288:7nVjIXLGoCpCAZQt7aeNj9G99auaxp+PzpgfRZKPjjhDXxSCkKK13:SXSoECb9FEzpgJZ3CBK13
Malware Config
Extracted
metasploit
metasploit_stager
116.62.4.161:65532
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1824-0-0x00000266F1540000-0x00000266F1541000-memory.dmpFilesize
4KB