General
-
Target
0ab74403166b7466d467f4e45574f8b7da0804a859474d76b5cbea1f06419827
-
Size
103KB
-
Sample
221127-wz9x4ahc39
-
MD5
2dd9da0c3e0f962a2ded5b3ee2d834cb
-
SHA1
978938f9552b6bde6563353883f0ad31cff4f0d4
-
SHA256
0ab74403166b7466d467f4e45574f8b7da0804a859474d76b5cbea1f06419827
-
SHA512
4ba72d0a171ce4b1f3edd0d6ab30fdf49b58487c8254564327a35cea02457656c4aa28ce26c923bce1fb23ef4c6e8ac6748159a1accac8351c646f2a85003479
-
SSDEEP
1536:Xjkdjl8WK4RP84vzPzAFgyswgLFLgPutYGzVTXK10ghi:TkdjlbfbU2ynkmPuJztXE0gh
Behavioral task
behavioral1
Sample
0ab74403166b7466d467f4e45574f8b7da0804a859474d76b5cbea1f06419827.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0ab74403166b7466d467f4e45574f8b7da0804a859474d76b5cbea1f06419827.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
0ab74403166b7466d467f4e45574f8b7da0804a859474d76b5cbea1f06419827
-
Size
103KB
-
MD5
2dd9da0c3e0f962a2ded5b3ee2d834cb
-
SHA1
978938f9552b6bde6563353883f0ad31cff4f0d4
-
SHA256
0ab74403166b7466d467f4e45574f8b7da0804a859474d76b5cbea1f06419827
-
SHA512
4ba72d0a171ce4b1f3edd0d6ab30fdf49b58487c8254564327a35cea02457656c4aa28ce26c923bce1fb23ef4c6e8ac6748159a1accac8351c646f2a85003479
-
SSDEEP
1536:Xjkdjl8WK4RP84vzPzAFgyswgLFLgPutYGzVTXK10ghi:TkdjlbfbU2ynkmPuJztXE0gh
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Modifies firewall policy service
-
Drops file in Drivers directory
-
Drops file in System32 directory
-