Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
23-07-2024 06:32
Behavioral task
behavioral1
Sample
fab9ee440941773da810330822287983689d747a2be814fce35891cf7e055b03.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
fab9ee440941773da810330822287983689d747a2be814fce35891cf7e055b03.exe
Resource
win11-20240709-en
General
-
Target
fab9ee440941773da810330822287983689d747a2be814fce35891cf7e055b03.exe
-
Size
72KB
-
MD5
645b6849e98ac80579129d4d5b77d781
-
SHA1
08ece8a90ee72a94bbb885a0dd6c6b716c4abcbb
-
SHA256
fab9ee440941773da810330822287983689d747a2be814fce35891cf7e055b03
-
SHA512
5e9971b54e0913e3003d4f8940ed9916a5643855238e494feef45c22a49821cc824038bb221c76c86ef1844c956a05825b25ca387ac67b6bb8c0b7a286fef4e1
-
SSDEEP
1536:IbC0tM2sfMDYQuN0a6xYB4wzZC8h0bJMb+KR0Nc8QsJq39:oC0MxC+5qYqNG0Je0Nc8QsC9
Malware Config
Extracted
metasploit
windows/reverse_tcp
94.131.3.105:20115
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.