Analysis
-
max time kernel
145s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
04-11-2024 14:37
General
-
Target
2a815990a4bcd2644c9a7d85989e9b2c4d1664121164950c3a6eba12327fc6ed.exe
-
Size
33KB
-
MD5
d88adc6703e4ae2c6860d94baa200fef
-
SHA1
ca0de2f10c1a5f8c7def84f84886192cd8071f8c
-
SHA256
2a815990a4bcd2644c9a7d85989e9b2c4d1664121164950c3a6eba12327fc6ed
-
SHA512
5020bd336b99238e8332be5b9648424ba52e05c33675fa4359bb701ba2faf4ca74ff88fac929da6124c276ecf5040a94fcad5373aea159888f5629deee9f08ea
-
SSDEEP
768:vKNflUtOro5a+1a0Hv1T8A8TPl0NYotL:v0iOs3bISNYot
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
52.187.78.9:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2a815990a4bcd2644c9a7d85989e9b2c4d1664121164950c3a6eba12327fc6ed.exe"C:\Users\Admin\AppData\Local\Temp\2a815990a4bcd2644c9a7d85989e9b2c4d1664121164950c3a6eba12327fc6ed.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
-
Filesize
48KB