General
-
Target
6f313414261cfe97829e961f7c693735
-
Size
172KB
-
Sample
240122-kcgggscef3
-
MD5
6f313414261cfe97829e961f7c693735
-
SHA1
6a5e54aeeb27f8c0ef960bb7975e4884c4853ab8
-
SHA256
b5912ec679e46ddcaf14b16e2e0dad68971d0413a9335014f015b61ce75c4538
-
SHA512
5dcf17c7c98e497ba30f8093f5cd8be350a2cc465c8e83f46c5edd695d404e7861fa85f4e84244cb1836387e5fb166afdb0b778c206e8a7be9291e82bc975161
-
SSDEEP
3072:BrkSCebEmjjuq6gCyDwSVSMSF61DW/TUdbiX5Bt7LxPmBqGwvwkjmarQ6nSMLBuR:1o6jjH3CyDw3MSF2uUa53JmBtwvwf09s
Static task
static1
Behavioral task
behavioral1
Sample
6f313414261cfe97829e961f7c693735.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6f313414261cfe97829e961f7c693735.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
6f313414261cfe97829e961f7c693735
-
Size
172KB
-
MD5
6f313414261cfe97829e961f7c693735
-
SHA1
6a5e54aeeb27f8c0ef960bb7975e4884c4853ab8
-
SHA256
b5912ec679e46ddcaf14b16e2e0dad68971d0413a9335014f015b61ce75c4538
-
SHA512
5dcf17c7c98e497ba30f8093f5cd8be350a2cc465c8e83f46c5edd695d404e7861fa85f4e84244cb1836387e5fb166afdb0b778c206e8a7be9291e82bc975161
-
SSDEEP
3072:BrkSCebEmjjuq6gCyDwSVSMSF61DW/TUdbiX5Bt7LxPmBqGwvwkjmarQ6nSMLBuR:1o6jjH3CyDw3MSF2uUa53JmBtwvwf09s
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-