Analysis
-
max time kernel
105s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
10-05-2024 19:32
Behavioral task
behavioral1
Sample
20e9c784ef66531dab130926cc926ec3a4b807a9f870b794063441ef0b9ce96f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20e9c784ef66531dab130926cc926ec3a4b807a9f870b794063441ef0b9ce96f.exe
Resource
win10v2004-20240508-en
General
-
Target
20e9c784ef66531dab130926cc926ec3a4b807a9f870b794063441ef0b9ce96f.exe
-
Size
72KB
-
MD5
0d1499658b330d5161d5b919811d56fc
-
SHA1
421160bbf99424a76ff1c211bef2cad68f40a281
-
SHA256
20e9c784ef66531dab130926cc926ec3a4b807a9f870b794063441ef0b9ce96f
-
SHA512
48383f834709ccc95005c4d384a1eeb15fff531025a7927588b472bad03a239509cefa6b62e37f660949cdd23c7a738367f23b8b19216784b785975314c8cc21
-
SSDEEP
1536:IdULpa/ipmic+T0ghvM8e/9IocYXrZIMb+KR0Nc8QsJq39:+upPpmiL0OU8u1XOe0Nc8QsC9
Malware Config
Extracted
metasploit
windows/shell_reverse_tcp
10.10.1.13:4444
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.