Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
01-01-2024 14:12
Static task
static1
Behavioral task
behavioral1
Sample
3d1061daa4eee9a94fe0b2252dd91316.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d1061daa4eee9a94fe0b2252dd91316.exe
Resource
win10v2004-20231215-en
General
-
Target
3d1061daa4eee9a94fe0b2252dd91316.exe
-
Size
46KB
-
MD5
3d1061daa4eee9a94fe0b2252dd91316
-
SHA1
695e283f668f7222c5eef4cbc9d33b7aa4ffd03f
-
SHA256
5ccd6386f489744bb54bd86d1b145c21064baa52c162483c548f15926dcb9625
-
SHA512
aa345229d917b5d90ae51fe63440ead165a30bffadfebaf95d3da66a1f2a9ae24a5db25856f6cb7925f8fd90a9bedf6731ca115d30744e011252ee9a43b73675
-
SSDEEP
768:IjIyKOpZ2nreZ3OCKP0DF0aH/5x/qlgpJ/5CfZr5wQInos4ZbVNIuyf0W6V2Dqu3:IsvOpZlZRF1fykQRRhfTi0TWkq3
Malware Config
Extracted
metasploit
windows/reverse_tcp_allports
192.168.235.128:1
Extracted
metasploit
encoder/shikata_ga_nai
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.