Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
18-09-2024 15:33
General
-
Target
2c8f857962404f54565d8a1e89169031b0b8680608421da4232a5483c6375e6aN.exe
-
Size
72KB
-
MD5
5c3e56763d9f12d8ddd19df4594453c0
-
SHA1
1680d0c97ba90110833b29bdba1a61fe9c98bc0e
-
SHA256
2c8f857962404f54565d8a1e89169031b0b8680608421da4232a5483c6375e6a
-
SHA512
64bc95b7c9de971507bce87aa9e17818b4a0f27e015cd54957a6ef525285e14cf6ac5b5b74c4c5632ffb22526cda4968cec9fd717ca657459eb22d51123f53c9
-
SSDEEP
1536:I/PFjnbAp24ctzl83myJDXT4a2TYwTCp2RB/Mb+KR0Nc8QsJq39:YPFjbApgtzl83tXT4ywTa2RFe0Nc8Qss
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c8f857962404f54565d8a1e89169031b0b8680608421da4232a5483c6375e6aN.exe"C:\Users\Admin\AppData\Local\Temp\2c8f857962404f54565d8a1e89169031b0b8680608421da4232a5483c6375e6aN.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB