Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17-09-2024 01:48
General
-
Target
cfbf98855c13ae617f4fd4a7c5bdfd6f0f6ceaf0cdd0e82295b7dc0623aa6839.exe
-
Size
72KB
-
MD5
c7b3d2dee7e91864b257220091576c13
-
SHA1
ff77da3a288ec4a11613f1c6f536f4023ffdd7d1
-
SHA256
cfbf98855c13ae617f4fd4a7c5bdfd6f0f6ceaf0cdd0e82295b7dc0623aa6839
-
SHA512
711f50df93f60c2af8b3416672052e6d1838d449756188e014f059e784ca45950813ca1dff6c22a943fa9c8eb7587f62577c56c6889d9bfa4c54bdc1fc57cad9
-
SSDEEP
1536:IJVUBex/V5HobZVeo7EoM6v40bar9zFh6Mb+KR0Nc8QsJq39:4+BM/V5Hwz7EojBa9Fh6e0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/call4_dword_xor
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\cfbf98855c13ae617f4fd4a7c5bdfd6f0f6ceaf0cdd0e82295b7dc0623aa6839.exe"C:\Users\Admin\AppData\Local\Temp\cfbf98855c13ae617f4fd4a7c5bdfd6f0f6ceaf0cdd0e82295b7dc0623aa6839.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB