Analysis
-
max time kernel
105s -
max time network
114s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
11-11-2024 08:09
Static task
static1
Behavioral task
behavioral1
Sample
0843f7cd3a8760af29d6d8d4359c3cf1ae286a434ba688974d7cbd7e9e2e2769.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0843f7cd3a8760af29d6d8d4359c3cf1ae286a434ba688974d7cbd7e9e2e2769.dll
Resource
win10v2004-20241007-en
General
-
Target
0843f7cd3a8760af29d6d8d4359c3cf1ae286a434ba688974d7cbd7e9e2e2769.dll
-
Size
364KB
-
MD5
ffbb0b2c41c45c780cf0a34f60143efa
-
SHA1
ce55f45859bcdb69cf1e08448e04583515e3d3d4
-
SHA256
0843f7cd3a8760af29d6d8d4359c3cf1ae286a434ba688974d7cbd7e9e2e2769
-
SHA512
4dbfcda269c324b3c8f7b565301aa4a2e2e56a56e3fc9a88af437f2663864e20d7e4a5d7996cf8e34c57a09253dca0d51740203bbe143ac6cf26b3ef87363e83
-
SSDEEP
6144:YwtNaxVbh2jGiVXXLTkd5MDtk+dLLcWV50DEr5rWh1wF:YDbh2jfJLTNtk+dLLcZDL4F
Malware Config
Extracted
metasploit
metasploit_stager
10.8.1.148:80
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family