Behavioral task
behavioral1
Sample
988676ec8d0b08f3e6597774a78cf8e2d5a7566ca08844a957d07b2e32349021.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
988676ec8d0b08f3e6597774a78cf8e2d5a7566ca08844a957d07b2e32349021.exe
Resource
win10v2004-20220721-en
General
-
Target
988676ec8d0b08f3e6597774a78cf8e2d5a7566ca08844a957d07b2e32349021
-
Size
7KB
-
MD5
4cc111a60a8da466e4c92daaf14c12d9
-
SHA1
873bdfd4838bb9afb4d7244da8b4919739a86537
-
SHA256
988676ec8d0b08f3e6597774a78cf8e2d5a7566ca08844a957d07b2e32349021
-
SHA512
7b7b02334057d60cf3cfa045bd5e780eeefbdd2ffdafb788d379bf28d1edfe21c7a375faa1c16ef8095c370f821b3f6975dd7fb5f4759438107b3b274e40a8d2
-
SSDEEP
24:eFGStrJ9u0/6EBnZdkBQAVoaYNq9KZqWxIeNDMSCvOb4pmB:is0dRkBQVts982SD9C2HB
Malware Config
Extracted
metasploit
metasploit_stager
187.74.75.191:3537
Signatures
-
Metasploit family
Files
-
988676ec8d0b08f3e6597774a78cf8e2d5a7566ca08844a957d07b2e32349021.exe windows x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oqzj Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE