Analysis
-
max time kernel
111s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07-12-2024 03:13
General
-
Target
39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe
-
Size
3KB
-
MD5
68852f4183e4b04ba78ed1f2c2124b7a
-
SHA1
5aa806c168daaee3333f0a4090c4f2f3199cae21
-
SHA256
39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a
-
SHA512
2ed2220bde3f7bbd35582d865a43dcb580a1fc29741e8f2b302faed4615296acb8301f2cc8c664b2d336794ee411bc9c1e7473f863994f51967a6a488798f8b2
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
10.0.2.9:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe"C:\Users\Admin\AppData\Local\Temp\39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
396KB
-
Filesize
764KB