Analysis
-
max time kernel
105s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17-09-2024 06:24
General
-
Target
7092abf1da67a4c214be2a9493b0f151a716f529a4e188f26d0b1d04591fabfcN.exe
-
Size
72KB
-
MD5
76dfc15073920ca395036987fee823a0
-
SHA1
63eed7819e13b419f8901076eef12b50c5235f2c
-
SHA256
7092abf1da67a4c214be2a9493b0f151a716f529a4e188f26d0b1d04591fabfc
-
SHA512
18e7631b21b540647a0eb5b3da33e82b58b822f2f6f232f73c3b9d5935b3aed436b248ca06036f206eb00f98985450ebaa2d3a58ad8c66f606ea477c89e82704
-
SSDEEP
1536:IxKntbtFgrffhTdm7e+ArQfWIqdx6495zMb+KR0Nc8QsJq39:gKtbtFgrj+WrQe7z6495ze0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/fnstenv_mov
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7092abf1da67a4c214be2a9493b0f151a716f529a4e188f26d0b1d04591fabfcN.exe"C:\Users\Admin\AppData\Local\Temp\7092abf1da67a4c214be2a9493b0f151a716f529a4e188f26d0b1d04591fabfcN.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB