Analysis
-
max time kernel
147s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
23-09-2024 20:18
General
-
Target
0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849.exe
-
Size
1.5MB
-
MD5
a6e5b1fb6d820de1eab89f177893ca8d
-
SHA1
50955eb588e6a915c6b017c84f8e62a7acefc647
-
SHA256
0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849
-
SHA512
9cf4efcda9ec69ba36d035d7e727b49e01f598644ba7ed88e8563c39560845b1be2d88ac507214c30d62609495cd386b52f9861ed7458b1d9f44765fd5c70534
-
SSDEEP
24576:UVvAf3GbD17f+xGvqTQQc3iFwInAKPfzMc2NAjBWm5HrUq3IbWpeFy:UVPp1/SFwg1bMdN6Wm5HQq3YWUg
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Extracted
metasploit
windows/reverse_tcp
192.168.8.134:50000
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849.exe"C:\Users\Admin\AppData\Local\Temp\0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
4KB
-
Filesize
72KB