Analysis
-
max time kernel
116s -
max time network
39s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
15-09-2024 08:00
General
-
Target
f2b927610eb6fa73f65b4ba3af345580N.exe
-
Size
1.3MB
-
MD5
f2b927610eb6fa73f65b4ba3af345580
-
SHA1
de5cefcff65b43b1b107c85b9f80c03aea7b2022
-
SHA256
f0b2eb09d88f9d304deaca945014ebe29f21bf4a5131313b25f24e7e2d77a798
-
SHA512
4faace657a2012ef7c5c0f393ea54a46214910f4b993373397a6131f3e3c6df62b6ca7b341a24598159095582c69a7ebefec99e2ffedf677775cd17f86f3a07c
-
SSDEEP
24576:k5lRMo0yiwcNRfdSKG95aqXzK/ekq3in+sayZ10AeCJTC+LzRhmxv3nO:kCdSKG/73inFeCnzMv3nO
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/download_exec
C2
http://192.168.19.83:4443/jquery-3.3.1.slim.min.js
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2b927610eb6fa73f65b4ba3af345580N.exe"C:\Users\Admin\AppData\Local\Temp\f2b927610eb6fa73f65b4ba3af345580N.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB