Analysis

  • max time kernel
    147s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09-11-2024 02:55

General

  • Target

    b92b2cd389f6e0d7a6df782c8e542d44d9eabc296111990739021d17418db25d.exe

  • Size

    100KB

  • MD5

    59750146aa2a20c487ee7d236cbfac30

  • SHA1

    0acbed92ef8dbc50a72ac13e6bafc062b466317c

  • SHA256

    b92b2cd389f6e0d7a6df782c8e542d44d9eabc296111990739021d17418db25d

  • SHA512

    072c0979a9599676c2a77c13214b74609c22d6a5dffde47da6071c01ee5a16b4c11e072128c8686185849080f7538c7db0dda664325a01b19569ea04d3214e5b

  • SSDEEP

    1536:9jpu4TwO5+QncfQAiZkkOIBFLTePs1qgMsxmGjLm9k/lJ:9jY4TwEeE/lJ

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.122.130:444

Signatures

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

  • Metasploit family

Processes

  • C:\Users\Admin\AppData\Local\Temp\b92b2cd389f6e0d7a6df782c8e542d44d9eabc296111990739021d17418db25d.exe
    "C:\Users\Admin\AppData\Local\Temp\b92b2cd389f6e0d7a6df782c8e542d44d9eabc296111990739021d17418db25d.exe"
    1⤵
      PID:2332

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2332-0-0x0000000000030000-0x0000000000031000-memory.dmp

      Filesize

      4KB

    • memory/2332-1-0x0000000000400000-0x000000000041D000-memory.dmp

      Filesize

      116KB