Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
31-10-2023 10:38
Static task
static1
Behavioral task
behavioral1
Sample
e54b4ddbb7c566d2544453f7e3632c1796d3ae45689474a18700af01467a8272.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
e54b4ddbb7c566d2544453f7e3632c1796d3ae45689474a18700af01467a8272.exe
Resource
win10v2004-20231023-en
General
-
Target
e54b4ddbb7c566d2544453f7e3632c1796d3ae45689474a18700af01467a8272.exe
-
Size
14KB
-
MD5
815a750adc9a3b094cd9392fd4028269
-
SHA1
e11bcb41fa59d9a2430a83aedf1ce73c9f488615
-
SHA256
e54b4ddbb7c566d2544453f7e3632c1796d3ae45689474a18700af01467a8272
-
SHA512
e2ea522bf839cc336fadbbfda356a092ffc492cdf51fdfdb4edaa8cb0c92a2aede468e7679203fb8ae4f3cae9c56d8fb608079c6628ca230f8cf88ea202f3a00
-
SSDEEP
192:r3mbPYCfMcrfOIuZmvKQxtzlSIVX6NO6s22TEuILejDMN1:SMCfrfQ6tBSI8s2WERLeUN1
Malware Config
Extracted
metasploit
windows/download_exec
http://10.141.186.227:443/NpRL
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.