General
-
Target
6c8ed3fea4377b29b5c67935833a8daec2f4bcfc3ce60c218bf172657d2cab39.exe
-
Size
4.6MB
-
Sample
240106-lyytbschbk
-
MD5
2a2f7842b3dc5ee4b6c2f6d225dcb6dc
-
SHA1
49edab8d0c81f7554aa236155f80172393a2df75
-
SHA256
6c8ed3fea4377b29b5c67935833a8daec2f4bcfc3ce60c218bf172657d2cab39
-
SHA512
2d83cc70b880e041a065f2c24f418ed786dae5258604caab8cc007fbcf799917a15d52764057123af7edd919be13b34a8b81102e5e1bfc7d3b30478ee5aaa73c
-
SSDEEP
98304:/PuHQcsibw8SPLeTtSQo5Z8DERxrfExYzrR3nk8Y5TfvtJK:nuwcXMHLKy6txmxk8sJK
Behavioral task
behavioral1
Sample
6c8ed3fea4377b29b5c67935833a8daec2f4bcfc3ce60c218bf172657d2cab39.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6c8ed3fea4377b29b5c67935833a8daec2f4bcfc3ce60c218bf172657d2cab39.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
metasploit
windows/reverse_tcp
192.168.198.129:6666
Targets
-
-
Target
6c8ed3fea4377b29b5c67935833a8daec2f4bcfc3ce60c218bf172657d2cab39.exe
-
Size
4.6MB
-
MD5
2a2f7842b3dc5ee4b6c2f6d225dcb6dc
-
SHA1
49edab8d0c81f7554aa236155f80172393a2df75
-
SHA256
6c8ed3fea4377b29b5c67935833a8daec2f4bcfc3ce60c218bf172657d2cab39
-
SHA512
2d83cc70b880e041a065f2c24f418ed786dae5258604caab8cc007fbcf799917a15d52764057123af7edd919be13b34a8b81102e5e1bfc7d3b30478ee5aaa73c
-
SSDEEP
98304:/PuHQcsibw8SPLeTtSQo5Z8DERxrfExYzrR3nk8Y5TfvtJK:nuwcXMHLKy6txmxk8sJK
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Loads dropped DLL
-