General
- Target Meeting.exe
- Size 72KB
- Sample240905-e234wssgmp
- SHA256 6779bc4c64850150de694166f4b215ce25bbaca7d60b293fa7bb65e6bdecbc1a
- MD5 1ebcc328f7d1da17041835b0a960e1fa
- SHA1 adf1fe6df61d59ca7ac6232de6ed3c07d6656a8c
- SHA512 0c537e8dbdf5de433f862a31fbcb5a709f7727783cb36f7ed3dcac1acb44d704d5ad570035259022b46a0370754d029f476ae40280983d1586de9098e31a31d6
- SSDEEP 1536:Imfnby2UHs4lwoK27TQPGjk8YXxMb+KR0Nc8QsJq39:lfnG/s4L7TfJYXxe0Nc8QsC9
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
Meeting.exe
Resource
win7-20240903-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Meeting.exe
Resource
win10v2004-20240802-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
89.197.154.115:7700
Targets
-
- Target Meeting.exe
- Size 72KB
- SHA256 6779bc4c64850150de694166f4b215ce25bbaca7d60b293fa7bb65e6bdecbc1a
- MD5 1ebcc328f7d1da17041835b0a960e1fa
- SHA1 adf1fe6df61d59ca7ac6232de6ed3c07d6656a8c
- SHA512 0c537e8dbdf5de433f862a31fbcb5a709f7727783cb36f7ed3dcac1acb44d704d5ad570035259022b46a0370754d029f476ae40280983d1586de9098e31a31d6
- SSDEEP 1536:Imfnby2UHs4lwoK27TQPGjk8YXxMb+KR0Nc8QsJq39:lfnG/s4L7TfJYXxe0Nc8QsC9
- MD5 SHA1 SHA512 SSDEEP
Score10/10MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.