Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
16/01/2024, 11:20
Behavioral task
behavioral1
Sample
5fc5aafe8f66f8bdea79e47e44c9a3aa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5fc5aafe8f66f8bdea79e47e44c9a3aa.exe
Resource
win10v2004-20231215-en
General
-
Target
5fc5aafe8f66f8bdea79e47e44c9a3aa.exe
-
Size
72KB
-
MD5
5fc5aafe8f66f8bdea79e47e44c9a3aa
-
SHA1
3cc66fe412734631df732a76cd323e8ff23edd5d
-
SHA256
e0b4ffc49a50af7428db412029aeb03f91d8b71d22133d0d6f60f0ca0b3a8821
-
SHA512
935f7c12bc2cd7cbe4c8f4767a61ad8af5a6ba413eadb9fd4275510d3caa2431b4a6c71ba15ab5b789b077ac414cb5af9d19281c53b1879be30f80dfe35839ef
-
SSDEEP
1536:IvPHVj0imkJjLVq+6f3kctMb+KR0Nc8QsJq39:gVRNLVq++0Ee0Nc8QsC9
Malware Config
Extracted
metasploit
windows/shell_reverse_tcp
172.16.10.106:4465
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.