General
- Target 231216-cyrwcaabbn_pw_infected.zip
- Size 597KB
- Sample231216-djkn6abfc2
- SHA256 f3e652a0750fddccf563d72bc1698b0851a31b9bbaa05d689ed1baf047f2a8bf
- MD5 5bd88bd6048a08781953aa7a21388128
- SHA1 bf12498a65d2331f575643e7c9590c211f17952f
- SHA512 1f5d2427073a7ae728a16f2b0870d5070100bb3ecaed68008202a772207baa9721792a1a7f28844b436e44d006e58cf15d2fdd6313548553fb8c902981d0bf65
- SSDEEP 12288:Fv7K+/Bpak9e6TvChoVxQn80bdGq8D7pgY0RvnjxNBu7dNmSkrz:Fvm+/aCeQfUJLyV0VJuRgSAz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
A5-leaflet-password-advice-for-ALs-v2.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
A5-leaflet-password-advice-for-ALs-v2.exe
Resource
win11-20231215-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.64.2:5555
Targets
-
- Target A5-leaflet-password-advice-for-ALs-v2.pdf
- Size 72KB
- SHA256 ae16297eb464164e185569833ae2c73d753b21901b876992ffbf12067a518f80
- MD5 a034064fe8fb25fa4b2c065c2f2bba75
- SHA1 b32b380d49209544f5bb51e451e98fdaea1bca06
- SHA512 fc1d0f2abb8b703681e3f24f494f2e933e118b7ef3199f83cdf6e07861bb142f40bdc02e3a5b509243a4738be26b018316ef5f39b373190c634e1a7910a9f901
- SSDEEP 1536:I7jDhEEHlyWukE5R+8YRGjBuqf76QWLMb+KR0Nc8QsJq39:Ij1EWlZ3E5M8YjLQWLe0Nc8QsC9
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.