General
-
Target
shell-48886.exe
-
Size
7KB
-
Sample
240520-ntvxzshf58
-
MD5
e25e81f0977c73bd520affd21c60bc44
-
SHA1
275b083759f41e4f3a7a30850fc45da5adf04b2a
-
SHA256
3928d74bcf90729c213549c50fe44621b7d82e54aed5e0f1b165e7dd5e8d4ab6
-
SHA512
bfa4e6a021391393b6a03312b52166da32c29826fcd49d7cdfcde8d9b6e90bc816a959ab11c1ee356e7b657146c9a008d83fd0791d69a2cff796656de60d0e4b
-
SSDEEP
24:eFGStrJ9u0/6zbnZdkBQAVKGYLwKLqweNDMSCvOXpmB:is0WHkBQvhLwQSD9C2kB
Behavioral task
behavioral1
Sample
shell-48886.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
shell-48886.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
metasploit
metasploit_stager
170.187.138.149:48886
Targets
-
-
Target
shell-48886.exe
-
Size
7KB
-
MD5
e25e81f0977c73bd520affd21c60bc44
-
SHA1
275b083759f41e4f3a7a30850fc45da5adf04b2a
-
SHA256
3928d74bcf90729c213549c50fe44621b7d82e54aed5e0f1b165e7dd5e8d4ab6
-
SHA512
bfa4e6a021391393b6a03312b52166da32c29826fcd49d7cdfcde8d9b6e90bc816a959ab11c1ee356e7b657146c9a008d83fd0791d69a2cff796656de60d0e4b
-
SSDEEP
24:eFGStrJ9u0/6zbnZdkBQAVKGYLwKLqweNDMSCvOXpmB:is0WHkBQvhLwQSD9C2kB
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-