Analysis
-
max time kernel
93s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
05-07-2024 16:06
Static task
static1
Behavioral task
behavioral1
Sample
29c8a6f9f4ff78e6019fbf55c882966f7af611b7c470cebe763b0c356756f351.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29c8a6f9f4ff78e6019fbf55c882966f7af611b7c470cebe763b0c356756f351.exe
Resource
win10v2004-20240704-en
General
-
Target
29c8a6f9f4ff78e6019fbf55c882966f7af611b7c470cebe763b0c356756f351.exe
-
Size
45KB
-
MD5
1b56ac299e10b84c9d04416ed1b309a2
-
SHA1
4ff159383923c10c97875f7cca192dcae0203ce9
-
SHA256
29c8a6f9f4ff78e6019fbf55c882966f7af611b7c470cebe763b0c356756f351
-
SHA512
c60041ff1fc61c2e551f3768eec2e24d7323d31a0e4f557884f54246fed7cdfb65d8616c45c02249fb127cbc008461eff4c03ad5edfb46be1606c5a80d8cf070
-
SSDEEP
768:qaQGlqpqlh7yIJ1/c6tnI2Nc5xeABGCfUHVWBEM7bVDy+PUWe+ji7DeWq3:qa84h7Z06tnIy2GCIWBp7ZDy+PUOJWq3
Malware Config
Extracted
metasploit
windows/reverse_tcp
89.197.154.116:7810
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.