Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13-05-2024 12:14
Static task
static1
Behavioral task
behavioral1
Sample
05ec5cd3d46b46321447f64fdeeae329d7e8afc656e97905b2692b8910cdc3b4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05ec5cd3d46b46321447f64fdeeae329d7e8afc656e97905b2692b8910cdc3b4.exe
Resource
win10v2004-20240508-en
General
-
Target
05ec5cd3d46b46321447f64fdeeae329d7e8afc656e97905b2692b8910cdc3b4.exe
-
Size
163KB
-
MD5
4fbb4ffbeab2ce7a801ed878071d07b3
-
SHA1
838b7931b463f848184e716c3d4608d5ae181382
-
SHA256
05ec5cd3d46b46321447f64fdeeae329d7e8afc656e97905b2692b8910cdc3b4
-
SHA512
bd080aa17c207fc65e390db3d572d6b21e1d6d4b137372d21337af1bf278b7482dd1bc0ff237cc7fd9ca1d3ec31bd417da2174494034dcc360b0e7272e4582fe
-
SSDEEP
3072:+8vbzyQ6Y1YXrbNK+3FNxacPEMkE0RQAiTWaz8BSW:+szAXNK+3FV+RQNTWP
Malware Config
Extracted
metasploit
metasploit_stager
192.168.158.128:1543
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.