Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
16-09-2024 19:28
General
-
Target
MSI4EEC.exe
-
Size
124KB
-
MD5
c03e1fff13af567d99148187b95166d4
-
SHA1
94f3c9512260d0b5d57e1347bb29a82ba4cda618
-
SHA256
1e5f5c4d877b001f1c7bde8ab2f8f97cb9e93c912e984ad2aafed61f577e14c5
-
SHA512
86081eda138f90464701ff8ee0680479cab0220b26308441da01d0254adf1e5577543bca70f4288cd595aa6daf8e7eee711c9bcbe90087c5a9c2175f1af8ca58
-
SSDEEP
1536:I8JW4a591GdX7zaco6HaH9h40SygWMb+KR0Nc8QsJq3:lJha5vGtho66TSygWe0Nc8QsC
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
3.235.131.212:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\MSI4EEC.exe"C:\Users\Admin\AppData\Local\Temp\MSI4EEC.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB