Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
13-11-2024 17:50
General
-
Target
fcc20145fc063baaafcfe9fd0a6565f83affbe91669afd543e685fd93022754f.exe
-
Size
39KB
-
MD5
14996ca03255e496686bd539f0787439
-
SHA1
b1e1bab254ddc585d10bda63e498fabd53c703dd
-
SHA256
fcc20145fc063baaafcfe9fd0a6565f83affbe91669afd543e685fd93022754f
-
SHA512
48ec7feab511de697bbefa77abccad9d9fa19ac5d1f3029cffb72d14409c0273ce79ff62af276ce2227a9a05bc0372909de057828f29b74f995460a137d06f96
-
SSDEEP
384:hl1sels4Hgi5tan7fVcYUokC1AnSvr0tZOwPhiomU4ByD2uSFvW:j1sw1gi5onjlZZz0tZ3hLL4ByDX
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.8.219:3333
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
Processes
-
C:\Users\Admin\AppData\Local\Temp\fcc20145fc063baaafcfe9fd0a6565f83affbe91669afd543e685fd93022754f.exe"C:\Users\Admin\AppData\Local\Temp\fcc20145fc063baaafcfe9fd0a6565f83affbe91669afd543e685fd93022754f.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB