General
-
Target
8feaab4d4770db9854fcbd7d27f6d46f
-
Size
500KB
-
Sample
240204-xqpfgagfd4
-
MD5
8feaab4d4770db9854fcbd7d27f6d46f
-
SHA1
acff4cba07bacb123af17f6fb612cba5bf84329f
-
SHA256
7bb646994e634d271125e25b4c9eb3e9bb4637bb79dd0817b7e83b1027aeb1f4
-
SHA512
022fbefbf2a0e2b28624893a3eca330479f4faa8e0944b52c260e904ce6bf2ab4cbc00ecf08fc7618f9d49fd36f9b219f4151e1181bcac2f493e3a4e3c0c6060
-
SSDEEP
12288:n2KlUusmKViNQlYomUIuStqmoD1FQ6BjS/1L4:n1UZUNQCyIuRHDT9IL4
Static task
static1
Behavioral task
behavioral1
Sample
8feaab4d4770db9854fcbd7d27f6d46f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8feaab4d4770db9854fcbd7d27f6d46f.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
8feaab4d4770db9854fcbd7d27f6d46f
-
Size
500KB
-
MD5
8feaab4d4770db9854fcbd7d27f6d46f
-
SHA1
acff4cba07bacb123af17f6fb612cba5bf84329f
-
SHA256
7bb646994e634d271125e25b4c9eb3e9bb4637bb79dd0817b7e83b1027aeb1f4
-
SHA512
022fbefbf2a0e2b28624893a3eca330479f4faa8e0944b52c260e904ce6bf2ab4cbc00ecf08fc7618f9d49fd36f9b219f4151e1181bcac2f493e3a4e3c0c6060
-
SSDEEP
12288:n2KlUusmKViNQlYomUIuStqmoD1FQ6BjS/1L4:n1UZUNQCyIuRHDT9IL4
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-