Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
15-12-2024 09:36
General
-
Target
c74a3f667ee332f0bd3577ee5d6d3eb78d3fc9693ac787e8a1c40e0d7f7996fe.exe
-
Size
113KB
-
MD5
21df538bbf0d348c9b617e39d40316ee
-
SHA1
514d2cea77ec7505870dd1de514bcd332065fc18
-
SHA256
c74a3f667ee332f0bd3577ee5d6d3eb78d3fc9693ac787e8a1c40e0d7f7996fe
-
SHA512
1ec43f61ee01fef1516a3ef8e245221a420859355380f921034086b80409384fd7ac721abc2d3cfc25e8af951a12ff9cc38787e5bebea20737fc3b856a99b208
-
SSDEEP
3072:yEV278VGyt5r667Q/maOxWn8+BlPXzfh0k8rMVfwQQQt:yEA78Tr6Q48QlPXzZz8OV
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.80.162:8888
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
Processes
-
C:\Users\Admin\AppData\Local\Temp\c74a3f667ee332f0bd3577ee5d6d3eb78d3fc9693ac787e8a1c40e0d7f7996fe.exe"C:\Users\Admin\AppData\Local\Temp\c74a3f667ee332f0bd3577ee5d6d3eb78d3fc9693ac787e8a1c40e0d7f7996fe.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
240KB