General
-
Target
1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74
-
Size
945KB
-
Sample
240923-sl7c9szbqj
-
MD5
4d15cf9a32195f50ceaa748fe9aec1f7
-
SHA1
9dd7d387a8cc244263b7c573b23f7fbef706dedd
-
SHA256
1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74
-
SHA512
d1902004d23489ab8b6413db00595a42f09fff3b42f8470c63cae243d65ef59f6c492119d88c6142a9b8651420fb2613b49038a6c57b2978dfe7897687de1cec
-
SSDEEP
12288:VqX9PxG0OKdVlU6eR8tuzWwZ1Vlra4KN0m7VqDbvZ9XU9flfwt:EX9BOK5U6eR8bwZXlSN0kqDr
Behavioral task
behavioral1
Sample
1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
windows/download_exec
http://192.168.195.127:4444/OYBr
- headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MAARJS)
Targets
-
-
Target
1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74
-
Size
945KB
-
MD5
4d15cf9a32195f50ceaa748fe9aec1f7
-
SHA1
9dd7d387a8cc244263b7c573b23f7fbef706dedd
-
SHA256
1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74
-
SHA512
d1902004d23489ab8b6413db00595a42f09fff3b42f8470c63cae243d65ef59f6c492119d88c6142a9b8651420fb2613b49038a6c57b2978dfe7897687de1cec
-
SSDEEP
12288:VqX9PxG0OKdVlU6eR8tuzWwZ1Vlra4KN0m7VqDbvZ9XU9flfwt:EX9BOK5U6eR8bwZXlSN0kqDr
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-