General
-
Target
8bf91d26e737b56aa4771761d591f405b5c04c6fd8f12e90e5b9ff9b580054db
-
Size
648KB
-
Sample
240913-2bt5masdlk
-
MD5
ac4f755722808855003abb5244be8778
-
SHA1
43c782af8197e16c32548129041735e06bf24b24
-
SHA256
8bf91d26e737b56aa4771761d591f405b5c04c6fd8f12e90e5b9ff9b580054db
-
SHA512
c8ceff9755699726a40e44b1d9bdbc301c5925d06a800c1e852d6e9638b59cbce04992db8640a9606a11c11d0e3505812315a414d4b7a928dce85aa2a379cca9
-
SSDEEP
12288:dIOE6dhaTWbx953GSEpup1awv0c3HiIZNDE19Ko9N7rCsVmcoMA:dIBIaTWbp3Glgp7v0CHlNW9Kk/tlR
Static task
static1
Behavioral task
behavioral1
Sample
8bf91d26e737b56aa4771761d591f405b5c04c6fd8f12e90e5b9ff9b580054db.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8bf91d26e737b56aa4771761d591f405b5c04c6fd8f12e90e5b9ff9b580054db.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
windows/download_exec
http://192.168.64.134:83/HzGS
- headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MDDCJS)
Targets
-
-
Target
8bf91d26e737b56aa4771761d591f405b5c04c6fd8f12e90e5b9ff9b580054db
-
Size
648KB
-
MD5
ac4f755722808855003abb5244be8778
-
SHA1
43c782af8197e16c32548129041735e06bf24b24
-
SHA256
8bf91d26e737b56aa4771761d591f405b5c04c6fd8f12e90e5b9ff9b580054db
-
SHA512
c8ceff9755699726a40e44b1d9bdbc301c5925d06a800c1e852d6e9638b59cbce04992db8640a9606a11c11d0e3505812315a414d4b7a928dce85aa2a379cca9
-
SSDEEP
12288:dIOE6dhaTWbx953GSEpup1awv0c3HiIZNDE19Ko9N7rCsVmcoMA:dIBIaTWbp3Glgp7v0CHlNW9Kk/tlR
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-