General
-
Target
5825f6e20048000d12baf56c3e4920b999eff6c7ece156f9fad6a5b95e51bf5e
-
Size
70KB
-
Sample
220724-tsk92sade8
-
MD5
e6589db22747ab7c4ae1eb8dbc7fb866
-
SHA1
4d4617223e7f6fdf404ec08fcfa7aadde279c2e0
-
SHA256
5825f6e20048000d12baf56c3e4920b999eff6c7ece156f9fad6a5b95e51bf5e
-
SHA512
a646f8335ab70f2c23f63345b9f060eef223336fe877a48f4719d311441abbe00e17817119b649d4ac8f08992ca8c6ee2d036d7e99681e3dde927c95f94f85c5
Static task
static1
Behavioral task
behavioral1
Sample
5825f6e20048000d12baf56c3e4920b999eff6c7ece156f9fad6a5b95e51bf5e.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
5825f6e20048000d12baf56c3e4920b999eff6c7ece156f9fad6a5b95e51bf5e.exe
Resource
win10v2004-20220721-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
5825f6e20048000d12baf56c3e4920b999eff6c7ece156f9fad6a5b95e51bf5e
-
Size
70KB
-
MD5
e6589db22747ab7c4ae1eb8dbc7fb866
-
SHA1
4d4617223e7f6fdf404ec08fcfa7aadde279c2e0
-
SHA256
5825f6e20048000d12baf56c3e4920b999eff6c7ece156f9fad6a5b95e51bf5e
-
SHA512
a646f8335ab70f2c23f63345b9f060eef223336fe877a48f4719d311441abbe00e17817119b649d4ac8f08992ca8c6ee2d036d7e99681e3dde927c95f94f85c5
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious use of SetThreadContext
-