General
-
Target
3ebe21761dc14cfe5ff92c4b3bdebc0b.exe
-
Size
1.7MB
-
Sample
240103-r5shsafagm
-
MD5
3ebe21761dc14cfe5ff92c4b3bdebc0b
-
SHA1
0e20934fed73d9bbab8ffbe145e8fe97577887ec
-
SHA256
883e9b74497a71ffc78b11c5e193d109660e5352f46eb8a746667496181b3f67
-
SHA512
eb264b0b188378d5d94be1545c4148241cb9b0cd18be2481211b44eb8d47c5d341ab52930186cfd5420ffb53916e0ac15fb415eef961f2932e31bbe778a931fd
-
SSDEEP
24576:BsWw+T18laXM56aiS/m8HpbbskWQi/eyfu9LBA0EfEeKEz0dpAZGmIzLnRi8RgVw:nwb8M5ykCQNVYEVE0oZwLnRHK7c
Static task
static1
Behavioral task
behavioral1
Sample
3ebe21761dc14cfe5ff92c4b3bdebc0b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ebe21761dc14cfe5ff92c4b3bdebc0b.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
metasploit
metasploit_stager
219.150.121.100:4449
Targets
-
-
Target
3ebe21761dc14cfe5ff92c4b3bdebc0b.exe
-
Size
1.7MB
-
MD5
3ebe21761dc14cfe5ff92c4b3bdebc0b
-
SHA1
0e20934fed73d9bbab8ffbe145e8fe97577887ec
-
SHA256
883e9b74497a71ffc78b11c5e193d109660e5352f46eb8a746667496181b3f67
-
SHA512
eb264b0b188378d5d94be1545c4148241cb9b0cd18be2481211b44eb8d47c5d341ab52930186cfd5420ffb53916e0ac15fb415eef961f2932e31bbe778a931fd
-
SSDEEP
24576:BsWw+T18laXM56aiS/m8HpbbskWQi/eyfu9LBA0EfEeKEz0dpAZGmIzLnRi8RgVw:nwb8M5ykCQNVYEVE0oZwLnRHK7c
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-