Analysis
-
max time kernel
147s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
02-12-2024 04:00
Behavioral task
behavioral1
Sample
eef5e42651730017e07fd3903c68fee1f88e794cc9588b0f0140770d628364e0.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eef5e42651730017e07fd3903c68fee1f88e794cc9588b0f0140770d628364e0.exe
Resource
win10v2004-20241007-en
General
-
Target
eef5e42651730017e07fd3903c68fee1f88e794cc9588b0f0140770d628364e0.exe
-
Size
72KB
-
MD5
ea370d74c9f07e6b814bd450e3a32294
-
SHA1
d6d943dd511b5ea55c22f2acb9f245149f404d8f
-
SHA256
eef5e42651730017e07fd3903c68fee1f88e794cc9588b0f0140770d628364e0
-
SHA512
2d1c9c42f3686b8b9b2e95f6feb150f7f95d352df1bf2f964431731d67e39bcdd08900423e520ac96051234f30a63625c9c1a9f6edc7cfa24d546a8041b5db60
-
SSDEEP
1536:Iku2/8rpvB0vmh4VgrV1/ICMb+KR0Nc8QsJq39:PdErZB5eVgrV5Xe0Nc8QsC9
Malware Config
Extracted
metasploit
windows/reverse_tcp
192.168.1.1:22
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language eef5e42651730017e07fd3903c68fee1f88e794cc9588b0f0140770d628364e0.exe