General
-
Target
2646e519ee58312ca55f02f6cbfa1088591477427b02aad97edc35211906354e
-
Size
9KB
-
Sample
240918-eyyp1ashnl
-
MD5
42c9fdab8f39bb15f27e1c6b56c313ea
-
SHA1
6b9890d457f70fc1dd75997b34156a5fd3a42996
-
SHA256
2646e519ee58312ca55f02f6cbfa1088591477427b02aad97edc35211906354e
-
SHA512
0bf0cecd5d370c4f82f4374a1bfe68f0be75fa04da5a819bb6700f09da93aa4ed2952acbf0a18712e870024f481cae61409d673189d9eb59673544ac75e42a47
-
SSDEEP
48:q0r+l6O5aXyn/hNhx4/jC/VGt+LrSD9C210Ehb0E:dX0kt+Lm5R
Behavioral task
behavioral1
Sample
2646e519ee58312ca55f02f6cbfa1088591477427b02aad97edc35211906354e.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2646e519ee58312ca55f02f6cbfa1088591477427b02aad97edc35211906354e.dll
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
metasploit_stager
43.136.244.24:9987
Targets
-
-
Target
2646e519ee58312ca55f02f6cbfa1088591477427b02aad97edc35211906354e
-
Size
9KB
-
MD5
42c9fdab8f39bb15f27e1c6b56c313ea
-
SHA1
6b9890d457f70fc1dd75997b34156a5fd3a42996
-
SHA256
2646e519ee58312ca55f02f6cbfa1088591477427b02aad97edc35211906354e
-
SHA512
0bf0cecd5d370c4f82f4374a1bfe68f0be75fa04da5a819bb6700f09da93aa4ed2952acbf0a18712e870024f481cae61409d673189d9eb59673544ac75e42a47
-
SSDEEP
48:q0r+l6O5aXyn/hNhx4/jC/VGt+LrSD9C210Ehb0E:dX0kt+Lm5R
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Blocklisted process makes network request
-
Suspicious use of SetThreadContext
-