Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
14-11-2024 13:00
General
-
Target
4ba7b01f4945873ea1041ae50fc2ccaee986086b52917c8500641768bbe03960.exe
-
Size
22KB
-
MD5
0858f37f2787baa8855b0a8a352e99a5
-
SHA1
62eaeff05049c5f8d58520132fc68a5ee0fda6c9
-
SHA256
4ba7b01f4945873ea1041ae50fc2ccaee986086b52917c8500641768bbe03960
-
SHA512
b8243e1da9bbc766cb3842cb9e46b0ba59e2726dc7adadfa1d17f3791bba0edff5971f573be3c226c95cae3520125ef1038a08603f55687dcaa5b87ff2bb0eda
-
SSDEEP
384:ACWGv4O8zvI3qQdJzLJO2Kx8AnQSwwvBsSuzByD2uWI8ot7F:A3GX8zvI3jpFOPZBstzByDNN
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.8.205:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
Processes
-
C:\Users\Admin\AppData\Local\Temp\4ba7b01f4945873ea1041ae50fc2ccaee986086b52917c8500641768bbe03960.exe"C:\Users\Admin\AppData\Local\Temp\4ba7b01f4945873ea1041ae50fc2ccaee986086b52917c8500641768bbe03960.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB