Analysis
- max time kernel
189s - max time network
204s - platform
windows7_x64 - resource
win7-20230712-en - resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system - submitted
07/08/2023, 23:33
Behavioral task
behavioral1
Sample
evil.pdf
Resource
win7-20230712-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
evil.pdf
Resource
win10v2004-20230703-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
template.exe
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
template.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
- Target template.exe
- Size 72KB
- Sample230807-3j77wsbc7z
- SHA256 01ccceca3e103f49dbbb6f4a5545186715a4e30179984ad3510ef19afd3d636a
- MD5 a3b79d857c1fe59a1e975ae4a0b0939f
- SHA1 72ccf958905a4f5e0c512f1a9220f7fd487cb489
- SHA512 ff6cf7d86b2d73d8b800b6f1e1448568f98f37c4395f1230a9f11786c4a66740df7447bdeb10d39bef7c4562b6877e8e6c04fd47cab7abb59fd78b427ed520a4
- SSDEEP 1536:IBPPSNY4T+s44tNO1rPsncowCCLpfRj6/GMb+KR0Nc8QsJq39:UPMlT+s4FVscoUFNe0Nc8QsC9
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
10.20.0.15:4444
Signatures
- MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.