Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-09-2024 07:10
General
-
Target
0539c48b47da5409c4299e002e132768.exe
-
Size
72KB
-
MD5
0539c48b47da5409c4299e002e132768
-
SHA1
f8f8d7258f92aaad1773bee41f4032ebf8d7c916
-
SHA256
77550cc0d9aa70e6d6b180538390e67d6acf8eb0802a6381bd14562b90a31ac1
-
SHA512
d616bd922c2a176243967407a0da999193d9d538069295ef331f60c835b8034d638be04509d31378cb935a6bc9b1b1efb4469a47b8f4dddb8dbc55c257bb02c4
-
SSDEEP
1536:I65M0ibDALpsa6QMyXhp+qY9AYIPfI5nKRcMb+KR0Nc8QsJq39:TSbD6t1Mcw9mA5nSce0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
89.197.154.116:7810
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0539c48b47da5409c4299e002e132768.exe"C:\Users\Admin\AppData\Local\Temp\0539c48b47da5409c4299e002e132768.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB