Analysis
-
max time kernel
147s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
20-12-2024 06:37
General
-
Target
题库.exe
-
Size
7KB
-
MD5
8cd48941642b00d4d21d93d9fe59b8fd
-
SHA1
ad7d86670628fde2adf4cfbbdd78484aa4c64617
-
SHA256
4146c54acf78593202aad39d21c211a8a4408aa3b0ef88a8774e37c807e324fd
-
SHA512
e7b02fe8b2a732418c2569d738658d95c56e4e47f9089abafe60b2c754efaef467a24ef2936d953bc2c5eeb31f0f790b0870ad68cd7813bb1a30749f8e3e265f
-
SSDEEP
24:eFGStrJ9u0/63Y8RnZd0BQAVJ0yCCNowkagE7FzxS3LFyvpmB:is0eY8h0BQY9BnT7FsLFxB
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
metasploit_stager
C2
10.3.0.231:9999
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
Processes
-
C:\Users\Admin\AppData\Local\Temp\题库.exe"C:\Users\Admin\AppData\Local\Temp\题库.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB