Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
24-09-2024 21:31
General
-
Target
502c52573bda48616cc58eee612cbce53493f3430f9aac14d64e0a051e6a878c.exe
-
Size
72KB
-
MD5
b191d9f40a19522a508b625923bf8892
-
SHA1
919edad17c79737b4217a0ffc07c4343f271a5b9
-
SHA256
502c52573bda48616cc58eee612cbce53493f3430f9aac14d64e0a051e6a878c
-
SHA512
363d585f2e0f4b8dbe4205bead67befd2a13be967cccceec4ae73723156521144638f2ca43b5541df88bdebcb4105caa3b5a315cfb336b4a645b16a54a3f8b78
-
SSDEEP
1536:IARgLvyVZaDh3z8LKYZRlgzz3fMb+KR0Nc8QsJq39:dgLiZaD98LKURSv3fe0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\502c52573bda48616cc58eee612cbce53493f3430f9aac14d64e0a051e6a878c.exe"C:\Users\Admin\AppData\Local\Temp\502c52573bda48616cc58eee612cbce53493f3430f9aac14d64e0a051e6a878c.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB