General
-
Target
ccea670b84eabd7e0cc8ee9315ee35c606b1f5c09f4931c3c544cade22b11098
-
Size
2.5MB
-
Sample
231117-r3avysab36
-
MD5
27f075de3f2212de1e81bb9f2283cef1
-
SHA1
db8e7e7cce12f3686803d6297ebcf380dfbc33de
-
SHA256
ccea670b84eabd7e0cc8ee9315ee35c606b1f5c09f4931c3c544cade22b11098
-
SHA512
ba3617f464786d48f6d559b14fa2e3d186c315e7fd3cb523d0bb1eb46b28ce2177eb58373d525242606e2f5a159d44924f4c4add339b165c4e7792757b6a6ded
-
SSDEEP
49152:dKv83MoXnFv3dcj7q5LsLp3CceMuczXrN83MoXnFv3dcj7q5LsLp3CceMuczaRv:dKv8HXnl3dcj7q5KpyceMuczXx8HXnlT
Behavioral task
behavioral1
Sample
ccea670b84eabd7e0cc8ee9315ee35c606b1f5c09f4931c3c544cade22b11098.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ccea670b84eabd7e0cc8ee9315ee35c606b1f5c09f4931c3c544cade22b11098.exe
Resource
win10v2004-20231020-en
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Extracted
metasploit
windows/reverse_tcp
172.24.192.211:777
Targets
-
-
Target
ccea670b84eabd7e0cc8ee9315ee35c606b1f5c09f4931c3c544cade22b11098
-
Size
2.5MB
-
MD5
27f075de3f2212de1e81bb9f2283cef1
-
SHA1
db8e7e7cce12f3686803d6297ebcf380dfbc33de
-
SHA256
ccea670b84eabd7e0cc8ee9315ee35c606b1f5c09f4931c3c544cade22b11098
-
SHA512
ba3617f464786d48f6d559b14fa2e3d186c315e7fd3cb523d0bb1eb46b28ce2177eb58373d525242606e2f5a159d44924f4c4add339b165c4e7792757b6a6ded
-
SSDEEP
49152:dKv83MoXnFv3dcj7q5LsLp3CceMuczXrN83MoXnFv3dcj7q5LsLp3CceMuczaRv:dKv8HXnl3dcj7q5KpyceMuczXx8HXnlT
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-