Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
10-09-2024 21:13
General
-
Target
file.exe
-
Size
45KB
-
MD5
7b821fd108214b29fff46483a60c8658
-
SHA1
ecb5f0dd1410e5e7851813287be286915d00bdbd
-
SHA256
cdef916e83e2af8a4cf899526eb3032826feb8aad1824f8b9a1b7c52f3f84280
-
SHA512
5fa8585a7522caf612f9961d2f53d9a7876f73c85452f5b2adefb9da8d52278875fb04ac449ac5ae847e3d72d59cd62cf7a32eae85308a28293becb41f80a165
-
SSDEEP
768:sXIakqD3Vi2liJyyN31uoa9p4qiOZZCIU+6onQgwWIWuiYSMXf96gsE+pzVP07Da:sX5k+UMicU3HaMaZCIU+6oQLlfIg8pzV
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
89.197.154.116:7810
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
4KB
-
Filesize
96KB