Behavioral task
behavioral1
Sample
payload.exe
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
payload.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
payload.exe
-
Size
72KB
-
MD5
70c92ec2f36a276f9ee00eb44486e6a0
-
SHA1
a0f08a05018444a4a8b6c0bda2c397879a1416c4
-
SHA256
838e1101d4abbe2461931e1e778d0f90f4e3a63add6a03e0d2367a28fa931aa4
-
SHA512
26309fdd2dbd5555cdb2e737f3ecf1a4fbf78908c685415dc975b6f916ce831a9b397a66c20b4e1671f58c2868130ab9769e77911a1995e23aac01ee3cc038cc
-
SSDEEP
1536:IzkFxws0vZ6M4tAYUdKbbGre6l/S9vqAZMb+KR0Nc8QsJq3:uIxgZV4tAVdKm112Ze0Nc8QsC
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.0.104:4444
Signatures
-
Metasploit family
Files
-
payload.exe.exe .ps1 windows:4 windows x86