Analysis
-
max time kernel
95s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
25-11-2024 07:07
General
-
Target
722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316.exe
-
Size
61KB
-
MD5
624abb551df76673771cee3ff32bc003
-
SHA1
e259f08a467f824c8026f8c31cb1e0b0c58d709c
-
SHA256
722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316
-
SHA512
cefba8ce09c136cffb35f8e40efb4bda5060f58a67472c02b2e87f8950e8c4b87448135c0c0d499c9f34c4af78c8739ab1aabfab12ed6d1a51057378e45efa59
-
SSDEEP
384:xTtTbyweTufayZfPYiIEHKQiR/+xwkrnxPtoG9sdSPJjQfBXZWHSFP/KP89Z0p:xBTbSyN6Y+G9zJ6BpWHSp/KP898
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/download_exec
C2
http://192.168.154.130:2662/T6hj
Attributes
- headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 733; .NET CLR 2.0.50727)
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
Processes
-
C:\Users\Admin\AppData\Local\Temp\722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316.exe"C:\Users\Admin\AppData\Local\Temp\722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
148KB
-
Filesize
148KB