Analysis
-
max time kernel
105s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
17-12-2024 05:48
General
-
Target
188611f6c8f3beb3828b832ed8a179793552b8b86142f055251160e74a3b1921N.exe
-
Size
72KB
-
MD5
ce8c15567e3a0a41a356ab190ed6f740
-
SHA1
9bce4a7b5d1744d9613c0385ee3eb445f71369aa
-
SHA256
188611f6c8f3beb3828b832ed8a179793552b8b86142f055251160e74a3b1921
-
SHA512
e0571eba1a0aa10b49fcc612b25a524cb1378297cc77a8e9d6c1118ec342ae7e813849802a2bef4534be494440e9a6083fb2b6a63f8b33e06c3c97887c80e5a0
-
SSDEEP
1536:IUV1PMNMDP+XLBfM6hMb+KR0Nc8QsJq39:N1PKxXLBUce0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.0.106:25687
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\188611f6c8f3beb3828b832ed8a179793552b8b86142f055251160e74a3b1921N.exe"C:\Users\Admin\AppData\Local\Temp\188611f6c8f3beb3828b832ed8a179793552b8b86142f055251160e74a3b1921N.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB