Analysis
-
max time kernel
148s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
11-11-2024 23:02
General
-
Target
62eb3e3c2e6bbec787239feb4d9e95211959d60eaa1ffa69fd15b7dcbe506652.exe
-
Size
2.3MB
-
MD5
10aa9bd22f5bec44cf8f7f6e114289b2
-
SHA1
11a17c156c2f95241b99bdbd8adfb142c2926ab1
-
SHA256
62eb3e3c2e6bbec787239feb4d9e95211959d60eaa1ffa69fd15b7dcbe506652
-
SHA512
713d65f6c6ec265392c57f3937a45945842c71edd5b821bd4bc1a3fdaff0e6e838d79bd6d379a6100873923efb5f2b2f58bb553d4b2f3f0ce5c36b34151af6ba
-
SSDEEP
49152:eb6YlxiqHeqFkZuBc1L2rN6Imv6XM1aXD7Z9PZkf2Ot6ZdzWFG:I6YlFeAUL4YImv6XnzXPI2Oo7SA
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.100.49:5555
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\62eb3e3c2e6bbec787239feb4d9e95211959d60eaa1ffa69fd15b7dcbe506652.exe"C:\Users\Admin\AppData\Local\Temp\62eb3e3c2e6bbec787239feb4d9e95211959d60eaa1ffa69fd15b7dcbe506652.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.8MB
-
Filesize
2.8MB