Analysis
- max time kernel
148s - max time network
154s - platform
windows7_x64 - resource
win7-20230831-en - resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system - submitted
13/10/2023, 01:57
Behavioral task
behavioral1
Sample
evil.pdf
Resource
win7-20230831-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
evil.pdf
Resource
win10v2004-20230915-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
template.exe
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
template.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
- Target template.exe
- Size 7KB
- Sample231013-cdfmksca27
- SHA256 cdb89817f0d1194ee615e044d8e31cc4a0978926839655a98077fc6f54fb0dd1
- MD5 e328caab4d822848a8fdf66c95843f61
- SHA1 8d39c7132d5c4ee918599cf771e5f1f8552235e9
- SHA512 85cc4e6c6bebfd75c8e4f86055617c849fdc319c7b157ee03183125a683cf0d2490e871d60a32ccc91856cac5ef60f4dd5c6815ca3e46ab2f9653ce191e66734
- SSDEEP 24:eFGStrJ9u0/69YlnZd0BQAV9G1YfqlKZq/GeNDMSCvOfpmB:is06Yl0BQPqiltGSD9C2sB
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
metasploit
Version
-
metasploit_stager
C2
-
10.0.2.15:4444
Signatures
- MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.