Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
06/04/2024, 04:58
Behavioral task
behavioral1
Sample
fc32f007b5e27b16f0ef041ecb640fddc8aa18111642a1efa6778d642fecccbb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc32f007b5e27b16f0ef041ecb640fddc8aa18111642a1efa6778d642fecccbb.exe
Resource
win10v2004-20240226-en
General
-
Target
fc32f007b5e27b16f0ef041ecb640fddc8aa18111642a1efa6778d642fecccbb.exe
-
Size
72KB
-
MD5
5223255e58309217f61d9e363d80781b
-
SHA1
64ed1b01fbb1201dd9b573d87222e59b9256460f
-
SHA256
fc32f007b5e27b16f0ef041ecb640fddc8aa18111642a1efa6778d642fecccbb
-
SHA512
2e01ac249fadd34a1218f7154bee543e74451991302d9bee06f283acbac79c2d85f6b897bb584a42aaded7086d615704a8a57fbfdfa42fd3116452c0fcaf4ff8
-
SSDEEP
1536:I05ztNz0eeFxTvevEWqUz9GoVojLzWM8hwMb+KR0Nc8QsJq39:Fz3z0eexytshLz6ye0Nc8QsC9
Malware Config
Extracted
metasploit
windows/reverse_tcp
147.185.221.19:15029
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.