General
-
Target
1380112134f31bad13cfc49af34374b7c4c9a02f3cf191e698feb9e79e9a9149
-
Size
4.6MB
-
Sample
240417-3v33baac29
-
MD5
b2148ff24735a82efdd719462c4fd4cf
-
SHA1
7a02db8e5c10b2b7ebbb27753219a347e2882141
-
SHA256
1380112134f31bad13cfc49af34374b7c4c9a02f3cf191e698feb9e79e9a9149
-
SHA512
1dea320f2d2cce42243088b26a65d981987f37d581469349abcabc4213316a7b533bc20bef4580598a670bd7b28b657315b4b85ed1985c83ff5ec2687542b9c4
-
SSDEEP
49152:X4POk1CT+CrVgzL9lRdb6+MbCiuXskaYUQIJQTCrEMCZ7JZ8SZ6ROhA0VF170jbm:X4P1CTpOzL9lvb6RWyXQIJQTCBt6
Static task
static1
Behavioral task
behavioral1
Sample
1380112134f31bad13cfc49af34374b7c4c9a02f3cf191e698feb9e79e9a9149.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1380112134f31bad13cfc49af34374b7c4c9a02f3cf191e698feb9e79e9a9149.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
metasploit
windows/download_exec
http://service-1cao6cjs-1312654103.gz.apigw.tencentcs.com:80/login.js
- headers User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
Targets
-
-
Target
1380112134f31bad13cfc49af34374b7c4c9a02f3cf191e698feb9e79e9a9149
-
Size
4.6MB
-
MD5
b2148ff24735a82efdd719462c4fd4cf
-
SHA1
7a02db8e5c10b2b7ebbb27753219a347e2882141
-
SHA256
1380112134f31bad13cfc49af34374b7c4c9a02f3cf191e698feb9e79e9a9149
-
SHA512
1dea320f2d2cce42243088b26a65d981987f37d581469349abcabc4213316a7b533bc20bef4580598a670bd7b28b657315b4b85ed1985c83ff5ec2687542b9c4
-
SSDEEP
49152:X4POk1CT+CrVgzL9lRdb6+MbCiuXskaYUQIJQTCrEMCZ7JZ8SZ6ROhA0VF170jbm:X4P1CTpOzL9lvb6RWyXQIJQTCBt6
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-