General
-
Target
b5d7410a9243f53d0083b788d6acd89c3b8ec2b337f305971627b92afc2be62a
-
Size
365KB
-
Sample
221021-em1efsbbgn
-
MD5
69332093f13e7292ad30f6ed5c96cba8
-
SHA1
31646c09a316de6b5dd268945b1bbfc512c92d0f
-
SHA256
b5d7410a9243f53d0083b788d6acd89c3b8ec2b337f305971627b92afc2be62a
-
SHA512
5f8c49b653139541e28d61a94622e22cadb56d16c5f0851415005ceb2fc2ef0ecbc5a5a55d739631e8ee6804846f1ee1f11dbe37b42c07677157dd4e4acb143a
-
SSDEEP
6144:sH4dTQyF2idZecnl20lHRxp3gJlk9ihl0/srEQpPK+e1FtEuxF+U2/kO:i+tF3Z4mxxCoEtlK+kt9T2MO
Behavioral task
behavioral1
Sample
b5d7410a9243f53d0083b788d6acd89c3b8ec2b337f305971627b92afc2be62a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5d7410a9243f53d0083b788d6acd89c3b8ec2b337f305971627b92afc2be62a.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
b5d7410a9243f53d0083b788d6acd89c3b8ec2b337f305971627b92afc2be62a
-
Size
365KB
-
MD5
69332093f13e7292ad30f6ed5c96cba8
-
SHA1
31646c09a316de6b5dd268945b1bbfc512c92d0f
-
SHA256
b5d7410a9243f53d0083b788d6acd89c3b8ec2b337f305971627b92afc2be62a
-
SHA512
5f8c49b653139541e28d61a94622e22cadb56d16c5f0851415005ceb2fc2ef0ecbc5a5a55d739631e8ee6804846f1ee1f11dbe37b42c07677157dd4e4acb143a
-
SSDEEP
6144:sH4dTQyF2idZecnl20lHRxp3gJlk9ihl0/srEQpPK+e1FtEuxF+U2/kO:i+tF3Z4mxxCoEtlK+kt9T2MO
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Deletes itself
-
Drops file in System32 directory
-