Analysis
-
max time kernel
148s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
18/03/2024, 18:23
Behavioral task
behavioral1
Sample
ccd26298318a95ff4dcb6748acf7d217.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ccd26298318a95ff4dcb6748acf7d217.exe
Resource
win10v2004-20240226-en
General
-
Target
ccd26298318a95ff4dcb6748acf7d217.exe
-
Size
72KB
-
MD5
ccd26298318a95ff4dcb6748acf7d217
-
SHA1
5322aba102a4c1fa73609ac0167c880987d9a5c6
-
SHA256
1be5fa8b12a5df4d34be14d79e5339d818ce460315849c52b84bddf46a098033
-
SHA512
6a4d770c7b7c8fab57e5f48e3b8b95c237365e1fc09c9d785f477b9feadb454cdf0ae61fe9c9e37e5a225d80fe088771fa5664f8673f2ba8f91d5067aebcee48
-
SSDEEP
1536:ITASCcY7pXhPw0LgCpwCQ5gs0Mb+KR0Nc8QsJq39:lpZw0LgDZ5gs0e0Nc8QsC9
Malware Config
Extracted
metasploit
windows/reverse_tcp
192.168.192.128:3333
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.