Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17-09-2024 01:49
General
-
Target
final.exe
-
Size
144KB
-
MD5
00e569b09c3095e042896d462fb44c53
-
SHA1
e1e96b016decda01a59dcdbf55022875d5efed7e
-
SHA256
8f724ffc83c133d4258beaeb667d02fe8c9ce5475fb1e3cfb2103581c3bfa1f5
-
SHA512
64e68a94494c58cdc8c48ba4d12ba76d742ecc6c2ef8c2eb273b62219652625cc5e6bdd4b3ea075201806456c4fe31b242b5aa66a8cd682417f6eace904a82c4
-
SSDEEP
3072:EaD7eFimTKEIm0Op+Ib2kPaMe0Nc8QsCp2JoxDBqrqVBye0Nc8QsC9:NlmT3fpf1PU0Nc8Qs7JCArqVH0Nc8Qss
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.1.100:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\final.exe"C:\Users\Admin\AppData\Local\Temp\final.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB