General
- Target 92aa56502b7643248c5dcae5d1391bf7aa60065a153f58c35b46fe679f7eb362
- Size 4.6MB
- Sample240526-rn4jqaaa73
- SHA256 92aa56502b7643248c5dcae5d1391bf7aa60065a153f58c35b46fe679f7eb362
- MD5 8504b5cd851e7bc6e40689123d1b63dc
- SHA1 b5429076b22ac0ba859dd838cc3474413b3b601e
- SHA512 80b0f74bb108a8676af7f777a2026dce92652e1a541617a578aeb28855a969ae004c82b089fa6e502b6381fcda64e0448c0d407a2cedc22a834f067e07f511a1
- SSDEEP 98304:/sYHQcsibw8SPLeTtSQo5Z8DERxrfExYzxc960OTbJd6ufJLF:kYwcXMHLKy6tx4c9WnJ5L
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
92aa56502b7643248c5dcae5d1391bf7aa60065a153f58c35b46fe679f7eb362.exe
Resource
win7-20240215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
92aa56502b7643248c5dcae5d1391bf7aa60065a153f58c35b46fe679f7eb362.exe
Resource
win10v2004-20240426-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.188.128:5577
Targets
-
- Target 92aa56502b7643248c5dcae5d1391bf7aa60065a153f58c35b46fe679f7eb362
- Size 4.6MB
- SHA256 92aa56502b7643248c5dcae5d1391bf7aa60065a153f58c35b46fe679f7eb362
- MD5 8504b5cd851e7bc6e40689123d1b63dc
- SHA1 b5429076b22ac0ba859dd838cc3474413b3b601e
- SHA512 80b0f74bb108a8676af7f777a2026dce92652e1a541617a578aeb28855a969ae004c82b089fa6e502b6381fcda64e0448c0d407a2cedc22a834f067e07f511a1
- SSDEEP 98304:/sYHQcsibw8SPLeTtSQo5Z8DERxrfExYzxc960OTbJd6ufJLF:kYwcXMHLKy6tx4c9WnJ5L
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Loads dropped DLL