Analysis
-
max time kernel
77s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
26/03/2025, 15:09
General
-
Target
pc.exe
-
Size
72KB
-
MD5
ebbe36e376d4323f3cae82993b66f8bb
-
SHA1
3fb32a416b116f76e123d4032f2d2c2db820d99e
-
SHA256
4f23ee0747a622f7e1063bf276e25e79b4b759375aec6a16d7e1645260ecd750
-
SHA512
bd3743249e9b2db6a4c1a71a544d9dad9161c35cc77abfdb2b2bb97e3a8f7c0562b13f1603286b368f145288144d84e12e1eb36ea8e2862b6ada76a5dad3cdf9
-
SSDEEP
1536:IbEZvOrJrk7xSgkTqcVMb+KR0Nc8QsJq39:Bh7xbCe0Nc8QsC9
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
164.92.154.140:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\pc.exe"C:\Users\Admin\AppData\Local\Temp\pc.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB