Analysis
- max time kernel
124s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
17/06/2024, 06:23
General
- Target f83bc732c98bd6be85c7db4e22b7646bec2335456d6f5d6b89b7fb9f2377af1a.exe
- Size 13.6MB
- Sample240617-g5vm2aybjb
- SHA256 f83bc732c98bd6be85c7db4e22b7646bec2335456d6f5d6b89b7fb9f2377af1a
Malware Config
Extracted
-
metasploit
-
metasploit_stager
-
47.236.250.223:6000
Signatures
- MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f83bc732c98bd6be85c7db4e22b7646bec2335456d6f5d6b89b7fb9f2377af1a.exe"C:\Users\Admin\AppData\Local\Temp\f83bc732c98bd6be85c7db4e22b7646bec2335456d6f5d6b89b7fb9f2377af1a.exe"1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1416,i,15316930299780304231,7592852768794498680,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4844-0-0x00000160B4ED0000-0x00000160B5375000-memory.dmp
memory/4844-1-0x00000160B7140000-0x00000160B763F000-memory.dmp
memory/4844-3-0x00000160B7140000-0x00000160B763F000-memory.dmp
memory/4844-5-0x00000160B7140000-0x00000160B763F000-memory.dmp
memory/4844-2-0x00000160B7140000-0x00000160B763F000-memory.dmp
memory/4844-4-0x00000160B7140000-0x00000160B763F000-memory.dmp
memory/4844-6-0x00000160DC920000-0x00000160DCA65000-memory.dmp
memory/4844-7-0x00000160DCBC0000-0x00000160DCD5F000-memory.dmp
memory/4844-10-0x00000160DCBC0000-0x00000160DCD5F000-memory.dmp
memory/4844-8-0x00000160DCBC0000-0x00000160DCD5F000-memory.dmp
memory/4844-11-0x00000160DCBC0000-0x00000160DCD5F000-memory.dmp
memory/4844-9-0x00000160DCBC0000-0x00000160DCD5F000-memory.dmp
memory/4844-12-0x0000016102050000-0x0000016102051000-memory.dmp
memory/4844-13-0x00000160B7140000-0x00000160B763F000-memory.dmp
memory/4844-14-0x00000160DCBC0000-0x00000160DCD5F000-memory.dmp