General
-
Target
ff42cadcc2330931d543161391a98f21f03ced156aa0764d874488f60228f7fa
-
Size
37KB
-
Sample
240624-1sm7zaxalq
-
MD5
697e5b6be7f05596b54956e1c3d0cfdf
-
SHA1
07a1e8a0c74df4c0a6a6921568b56a012ee797f9
-
SHA256
ff42cadcc2330931d543161391a98f21f03ced156aa0764d874488f60228f7fa
-
SHA512
ab4bfc6fb128f050416abe1865749a56cd2d916d7f97fcde1b17c9ab9ab47c88b0db3ba4188c6d29e8a63330ca11f9977db16709f7ae43c78ac60f728cb31baa
-
SSDEEP
384:On8iSsqdg1vA9cbVH532g7SQdrNy+pJdH50jntC:OE+1o9uHYg7bPy+pJd5
Behavioral task
behavioral1
Sample
ff42cadcc2330931d543161391a98f21f03ced156aa0764d874488f60228f7fa.doc
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ff42cadcc2330931d543161391a98f21f03ced156aa0764d874488f60228f7fa.doc
Resource
win10v2004-20240508-en
Malware Config
Extracted
metasploit
windows/reverse_http
http://192.168.49.70:443/FuWHUSPkzR6om6mazuKW1wDZnM_74FEMqlOMU4x5nOnOxuxeWzqJr1bmslS3dMJDASTwuuRuM3qTCypahl4NfsrYNi7f7YaR6X3VOQNjRR11sMdYCcUAXcm-kqSk-vN6bERIl1f8sleXNRwhBbjejPyhh5LvhR4MnGnteM1QRLF-SZyuHrvUwiZm1PDYuyfuP36ncCtXgvaZOupgQuel-MK_yLc3Oqup5xBD4mT7E9c4B6
Targets
-
-
Target
ff42cadcc2330931d543161391a98f21f03ced156aa0764d874488f60228f7fa
-
Size
37KB
-
MD5
697e5b6be7f05596b54956e1c3d0cfdf
-
SHA1
07a1e8a0c74df4c0a6a6921568b56a012ee797f9
-
SHA256
ff42cadcc2330931d543161391a98f21f03ced156aa0764d874488f60228f7fa
-
SHA512
ab4bfc6fb128f050416abe1865749a56cd2d916d7f97fcde1b17c9ab9ab47c88b0db3ba4188c6d29e8a63330ca11f9977db16709f7ae43c78ac60f728cb31baa
-
SSDEEP
384:On8iSsqdg1vA9cbVH532g7SQdrNy+pJdH50jntC:OE+1o9uHYg7bPy+pJd5
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-