Analysis
-
max time kernel
143s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
23-08-2023 12:09
Behavioral task
behavioral1
Sample
154a5ed6155001cecfe69135afad1cb6fac9ccc5de32dd0cf2e4ef2f91382098.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
154a5ed6155001cecfe69135afad1cb6fac9ccc5de32dd0cf2e4ef2f91382098.exe
Resource
win10v2004-20230703-en
General
-
Target
154a5ed6155001cecfe69135afad1cb6fac9ccc5de32dd0cf2e4ef2f91382098.exe
-
Size
59KB
-
MD5
2763da82c962f442674cb1615a12942a
-
SHA1
d6685a6b9aaf80e4a5695771d80f93df24f8c1ec
-
SHA256
154a5ed6155001cecfe69135afad1cb6fac9ccc5de32dd0cf2e4ef2f91382098
-
SHA512
c6b80ad8756907ba960b4a676053ad6a4951b9e62eb5391d5bac6a0397b632f5c501c41912ed6845ccf5f0c3a32844b44cab3fd547d1a94b0f62e95d448023e3
-
SSDEEP
384:I3BXeeTeV2vEyKZbMxBxFImH/UNmLH2pnYojrtB2QfBXQA2gtHP89Z5N:MBXMVhyxeA2NYo/tBPBH5P89
Malware Config
Extracted
metasploit
windows/reverse_tcp
192.168.146.145:6666
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.