General
-
Target
cdb3ff6eec0bcadaa3b9de1e964cf65b5ce6c9846db5d09bb199ac0f7d232bbf
-
Size
1.3MB
-
Sample
201106-gd74wyknce
-
MD5
48bb5ab28fdc0ac0f5a4fe649f118fe0
-
SHA1
6afee40728f4e2717c298e6aab8ccf7d5ce87380
-
SHA256
cdb3ff6eec0bcadaa3b9de1e964cf65b5ce6c9846db5d09bb199ac0f7d232bbf
-
SHA512
8eb0051c50f6a9c532e60dc252b804bee65384b3963f5c2159af60f83576ac4156691139e4a3360873428591315cc3d00f48da0ac6804abf95c36fc0baffc6bf
Static task
static1
Behavioral task
behavioral1
Sample
cdb3ff6eec0bcadaa3b9de1e964cf65b5ce6c9846db5d09bb199ac0f7d232bbf.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
cdb3ff6eec0bcadaa3b9de1e964cf65b5ce6c9846db5d09bb199ac0f7d232bbf.exe
Resource
win10v20201028
Malware Config
Extracted
metasploit
windows/download_exec
http://5.39.216.203:84/jCbM
- headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP02)
Targets
-
-
Target
cdb3ff6eec0bcadaa3b9de1e964cf65b5ce6c9846db5d09bb199ac0f7d232bbf
-
Size
1.3MB
-
MD5
48bb5ab28fdc0ac0f5a4fe649f118fe0
-
SHA1
6afee40728f4e2717c298e6aab8ccf7d5ce87380
-
SHA256
cdb3ff6eec0bcadaa3b9de1e964cf65b5ce6c9846db5d09bb199ac0f7d232bbf
-
SHA512
8eb0051c50f6a9c532e60dc252b804bee65384b3963f5c2159af60f83576ac4156691139e4a3360873428591315cc3d00f48da0ac6804abf95c36fc0baffc6bf
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-