Analysis
-
max time kernel
105s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
01/01/2025, 00:45
General
-
Target
bee308e40b666b235e5d73827209759dd34743080de3d502638126be880fd655.exe
-
Size
72KB
-
MD5
6e1e843bb1463c5484d082ba86b04479
-
SHA1
2933eae2734ad9fc16ddf1ec74fc723e9e4f556b
-
SHA256
bee308e40b666b235e5d73827209759dd34743080de3d502638126be880fd655
-
SHA512
ffb70294e6b418b4e36f1ff7cfc551cab2ddad1d75ec1055d5f96a0031b80f7107cf365f59fbe3097963140d612d6708ec8bb4bc4363aac608b1815f22fb482b
-
SSDEEP
1536:Idl/a7AqP6if/wfJQE18nLIX5Z/MHKsMb+KR0Nc8QsJq3t:mliB6zHuLIL/Mqse0Nc8QsCt
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.1.6:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bee308e40b666b235e5d73827209759dd34743080de3d502638126be880fd655.exe"C:\Users\Admin\AppData\Local\Temp\bee308e40b666b235e5d73827209759dd34743080de3d502638126be880fd655.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB