Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
25-12-2024 15:14
General
-
Target
08ffafa17eb22ef7cc5c0d53bca3e635c2db18a0f1e0dde139930702a093c86aN.exe
-
Size
189KB
-
MD5
63f5ec96b6ed62519a94fb7ef9ae63c0
-
SHA1
e550d810b775cf7942247051f2c7e6d257727295
-
SHA256
08ffafa17eb22ef7cc5c0d53bca3e635c2db18a0f1e0dde139930702a093c86a
-
SHA512
355374750a0a53322c5385a835b40c3ab51ef5b60054c8ac639e7857e3014cb86cbf9eda2dcfc1b080a4e55a42673b9e523c87ab36635176f466f454c73058f6
-
SSDEEP
3072:AV12yaqWRMg6XRB7k3nAietmIrHO0w36/CNor0KeQun086dAHXhaafMzD:AXNavyTXb7qetmOu0w4M2peQun086QXS
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
10.25.35.45:3355
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
Processes
-
C:\Users\Admin\AppData\Local\Temp\08ffafa17eb22ef7cc5c0d53bca3e635c2db18a0f1e0dde139930702a093c86aN.exe"C:\Users\Admin\AppData\Local\Temp\08ffafa17eb22ef7cc5c0d53bca3e635c2db18a0f1e0dde139930702a093c86aN.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
4KB
-
Filesize
380KB
-
Filesize
380KB