General
- Target ab73ad9e35cf03898133ddadc732744c.exe
- Size 72KB
- Sample230525-3hpddsde8z
- SHA256 45ba49b1bdf286caad4aabde83c88838371eed396b0561ba5829d8b5f70eb27d
- MD5 ab73ad9e35cf03898133ddadc732744c
- SHA1 6ba3ff506c949ae2a2bbbb03ddaaee79ea7ba07b
- SHA512 c4a0a66c1d7304a1fc7c0c3f2e992e02eac72c0952e468a2d2302c153f2ac3100617549c0df60882d682e7303d47402bcdfb6796da9acc312b40623d65cb8a5d
- SSDEEP 1536:Iz4ERgIpBR1D88wazns/KWjU53D7o49R5iLlKMb+KR0Nc8QsJq39:eeIDPfslg53D7tEKe0Nc8QsC9
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
ab73ad9e35cf03898133ddadc732744c.exe
Resource
win7-20230220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ab73ad9e35cf03898133ddadc732744c.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
encoder/shikata_ga_nai
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
138.197.132.111:2443
Targets
-
- Target ab73ad9e35cf03898133ddadc732744c.exe
- Size 72KB
- SHA256 45ba49b1bdf286caad4aabde83c88838371eed396b0561ba5829d8b5f70eb27d
- MD5 ab73ad9e35cf03898133ddadc732744c
- SHA1 6ba3ff506c949ae2a2bbbb03ddaaee79ea7ba07b
- SHA512 c4a0a66c1d7304a1fc7c0c3f2e992e02eac72c0952e468a2d2302c153f2ac3100617549c0df60882d682e7303d47402bcdfb6796da9acc312b40623d65cb8a5d
- SSDEEP 1536:Iz4ERgIpBR1D88wazns/KWjU53D7o49R5iLlKMb+KR0Nc8QsJq39:eeIDPfslg53D7tEKe0Nc8QsC9
- MD5 SHA1 SHA512 SSDEEP
Score10/10MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.