Analysis
-
max time kernel
210s -
max time network
225s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06-12-2024 19:37
General
-
Target
Copy of executable.2012.exe
-
Size
72KB
-
MD5
32de42a20c013aa80dc138b9bbc430ef
-
SHA1
45ef2de4b50c15aa1c02894ffe2f0ec7b964344b
-
SHA256
60d645236bcabd0f9754ae49ee8b73fd7349af9a960439981fd69124532e560a
-
SHA512
98f1f440afeb838b94252a267a60b7042e5f6a4dc4f8b3bff7e7e0623b93df3a04fdcb24c5fb31d617931774f44c2b43f326bae25d1e13ab1122894c23fd0f67
-
SSDEEP
384:IiElQUjoa9PaTmvXAVDXaUHH06zfAdYRcWmU5q3:IiE9oAwBXpCQq3
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.56.101:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Copy of executable.2012.exe"C:\Users\Admin\AppData\Local\Temp\Copy of executable.2012.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB