Overview
overview
10Static
static
10c9cf535b84...cN.exe
windows7-x64
10c9cf535b84...cN.exe
windows10-2004-x64
10$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3General
-
Target
c9cf535b848f423b39d7025a542b361010694da53689631d4a9ebe498b2cb85cN
-
Size
3.6MB
-
Sample
241103-hmepjaxhkg
-
MD5
0d885816e52ec425f1f398d5fc3067d0
-
SHA1
43963df9679661943c26e0013e0d6b05cd80fcb9
-
SHA256
c9cf535b848f423b39d7025a542b361010694da53689631d4a9ebe498b2cb85c
-
SHA512
6d0e9a0db88de453f133972cf7ced5cc25dca465649e3b8cb71071a3c624b308accbf44003e315c12ca74a7c59f11e46af6fe039a053eccbaa1fdb5c32c458d4
-
SSDEEP
98304:Ov9BPOfEV1ciAuipG08fMyZ1Uyv0PmSGrF28HgKMhyKfIpoJsku:OlEYciAuioRMy7J0P+rchyKfIpasku
Behavioral task
behavioral1
Sample
c9cf535b848f423b39d7025a542b361010694da53689631d4a9ebe498b2cb85cN.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
c9cf535b848f423b39d7025a542b361010694da53689631d4a9ebe498b2cb85cN.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20241023-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Extracted
metasploit
windows/reverse_tcp
120.26.166.249:4433
Targets
-
-
Target
c9cf535b848f423b39d7025a542b361010694da53689631d4a9ebe498b2cb85cN
-
Size
3.6MB
-
MD5
0d885816e52ec425f1f398d5fc3067d0
-
SHA1
43963df9679661943c26e0013e0d6b05cd80fcb9
-
SHA256
c9cf535b848f423b39d7025a542b361010694da53689631d4a9ebe498b2cb85c
-
SHA512
6d0e9a0db88de453f133972cf7ced5cc25dca465649e3b8cb71071a3c624b308accbf44003e315c12ca74a7c59f11e46af6fe039a053eccbaa1fdb5c32c458d4
-
SSDEEP
98304:Ov9BPOfEV1ciAuipG08fMyZ1Uyv0PmSGrF28HgKMhyKfIpoJsku:OlEYciAuioRMy7J0P+rchyKfIpasku
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
15KB
-
MD5
05bf02da51e717f79f6b5cbea7bc0710
-
SHA1
07471a64ef4dba9dc19ce68ae6cce683af7df86d
-
SHA256
ca092ba7f275b0c9000098cdd1a9876fe8dc050fcb40a0e8a1ab8335236e9dc5
-
SHA512
c09e475babd5eb675cdf903b2b754b8b68450a731cb520f3dcbf9abe0ed03d19256f009429977d3a51decb3a2a938be0b28dbafeb407409fa85e54da6dbaaad6
-
SSDEEP
384:ESC43tPegZ3eBaRwCPOYY7nNYXCv/Yosa:EbTgZ3eBTCmrnNAx
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
0d7ad4f45dc6f5aa87f606d0331c6901
-
SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457
-
SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
-
SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
SSDEEP
192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
466179e1c8ee8a1ff5e4427dbb6c4a01
-
SHA1
eb607467009074278e4bd50c7eab400e95ae48f7
-
SHA256
1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
-
SHA512
7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
-
SSDEEP
192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
Score3/10 -