General
-
Target
6c055a021e4446a6d4f3c25690988c10N
-
Size
513KB
-
Sample
240908-c6xfsszhlr
-
MD5
6c055a021e4446a6d4f3c25690988c10
-
SHA1
81661d0510c4b8a4a5c9bf7955c8cd4ed891c1b1
-
SHA256
956bd5ac5746f4e92c9ae97c77e714188ebfb49e7552113dafe871e62853860e
-
SHA512
06ce4de973c7baeb53f27a9b2965f24bf8d49a216c8449d8d66d62c2d54d386e74d974adeab773d36d817bf6fe56ea5e67d66cbbdaf1b157c6522f399efc1c6e
-
SSDEEP
12288:bHAE+gcDDzlWnnqIDmaFMUA7VwnNwcDETWEfD6l/JuJwBpf9:bHAZ7z6nqOwUA7Vwn3DETWCwuqX
Static task
static1
Behavioral task
behavioral1
Sample
6c055a021e4446a6d4f3c25690988c10N.docm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6c055a021e4446a6d4f3c25690988c10N.docm
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
windows/reverse_http
http://139.162.249.106:4444/9dPuUFpOeQ_mZudnh_Bk-gB3qENo3TtVIO1XahDnEp9dYlN98R8WEzbaRv-XnQuPRJxx4Y-98k3fwiEKUgHRAftoYFiwaXDFU4fty1ZfyvSILA0P-NZauCtJHFpPtBiVkyTrXvBZX5t6yGOXuefG1UC14v8uMSaWyvOqd
Targets
-
-
Target
6c055a021e4446a6d4f3c25690988c10N
-
Size
513KB
-
MD5
6c055a021e4446a6d4f3c25690988c10
-
SHA1
81661d0510c4b8a4a5c9bf7955c8cd4ed891c1b1
-
SHA256
956bd5ac5746f4e92c9ae97c77e714188ebfb49e7552113dafe871e62853860e
-
SHA512
06ce4de973c7baeb53f27a9b2965f24bf8d49a216c8449d8d66d62c2d54d386e74d974adeab773d36d817bf6fe56ea5e67d66cbbdaf1b157c6522f399efc1c6e
-
SSDEEP
12288:bHAE+gcDDzlWnnqIDmaFMUA7VwnNwcDETWEfD6l/JuJwBpf9:bHAZ7z6nqOwUA7Vwn3DETWCwuqX
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Executes dropped EXE
-
Loads dropped DLL
-