General
-
Target
b9b8a0f4d78315c436c9d6b6699952fe
-
Size
400KB
-
Sample
240307-1h113sef73
-
MD5
b9b8a0f4d78315c436c9d6b6699952fe
-
SHA1
eb01d19aba86beed4e5ecf88bb7b1565531efa07
-
SHA256
32e4d84e634fd4d7c979f0008fe32c21a0713eed09caba58e85dca3bb9e772dc
-
SHA512
ea8ace598443ebccc21fb0e30aff121604ccb28d4bda9e7dd44a2c5d92bfd61467520b75a427a7d79aefcc6d492b04bf6fc1a45b5f3f80583bf3437c87990814
-
SSDEEP
6144:4u5g79cOY/LnJCPEQ42F+40HG5W2s4ugIueUQjiEzMtm6187Un:4u5g79cV/QELG+40HG504nIuRQjizRn
Behavioral task
behavioral1
Sample
b9b8a0f4d78315c436c9d6b6699952fe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9b8a0f4d78315c436c9d6b6699952fe.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
b9b8a0f4d78315c436c9d6b6699952fe
-
Size
400KB
-
MD5
b9b8a0f4d78315c436c9d6b6699952fe
-
SHA1
eb01d19aba86beed4e5ecf88bb7b1565531efa07
-
SHA256
32e4d84e634fd4d7c979f0008fe32c21a0713eed09caba58e85dca3bb9e772dc
-
SHA512
ea8ace598443ebccc21fb0e30aff121604ccb28d4bda9e7dd44a2c5d92bfd61467520b75a427a7d79aefcc6d492b04bf6fc1a45b5f3f80583bf3437c87990814
-
SSDEEP
6144:4u5g79cOY/LnJCPEQ42F+40HG5W2s4ugIueUQjiEzMtm6187Un:4u5g79cV/QELG+40HG504nIuRQjizRn
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-