Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10-11-2024 00:41
General
-
Target
94b4017aac6f22b2f6c34bf6bdcf61b8bd094ea7c3330d31f1263db43e02e3e4.exe
-
Size
72KB
-
MD5
d65f1f2339454e76b18c868c9459ba2f
-
SHA1
ce3f574228f4d3dba10ae0ab1a0caf1077c4a968
-
SHA256
94b4017aac6f22b2f6c34bf6bdcf61b8bd094ea7c3330d31f1263db43e02e3e4
-
SHA512
fd7aaa586babae111d18233d573f9ea487394c2e24d7ceb20672b01d9f34c0c22bcf33c1bf544da72a9e7314db16e2bb073c306b0c7a1b78c5584d78e6240abb
-
SSDEEP
1536:ICCdbS1KvPhYtE4EVw90hdu9plO6lDThV8OMb+KR0Nc8QsJq39:bIvPcE4Edkdhte0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
127.0.0.1:5555
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\94b4017aac6f22b2f6c34bf6bdcf61b8bd094ea7c3330d31f1263db43e02e3e4.exe"C:\Users\Admin\AppData\Local\Temp\94b4017aac6f22b2f6c34bf6bdcf61b8bd094ea7c3330d31f1263db43e02e3e4.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB