General
-
Target
28dac78fdc3c9bbf29420476129dd4fb8da8a39de4ffea5a25b1ca973702ceda
-
Size
11.4MB
-
Sample
241113-q78gcatbqr
-
MD5
57c1ebf5e18964c6323b180ff8fa26fd
-
SHA1
bceedaeb57adf1cbe11027aade3ddffc70ad07f9
-
SHA256
28dac78fdc3c9bbf29420476129dd4fb8da8a39de4ffea5a25b1ca973702ceda
-
SHA512
b06a5e0c094669b7ae7ed82540fd3e2cd5edfada36a2525cd98da3d100b532e678e80a837a0f114a4bf4c3e7ed3277b9e10878cac9b5293862d8f725daed63bc
-
SSDEEP
196608:c694QeYehmAv8JLWtHkhqZV8fm2nuXPkBh3DXMpeFs2VIFuYHZ1a9bVi/Qe:cEd2p0xhgZiefs/DXnsBuYHZsbgo
Behavioral task
behavioral1
Sample
28dac78fdc3c9bbf29420476129dd4fb8da8a39de4ffea5a25b1ca973702ceda.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28dac78fdc3c9bbf29420476129dd4fb8da8a39de4ffea5a25b1ca973702ceda.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/download_exec
http://192.168.1.3:4236/GxUH
- headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)
Targets
-
-
Target
28dac78fdc3c9bbf29420476129dd4fb8da8a39de4ffea5a25b1ca973702ceda
-
Size
11.4MB
-
MD5
57c1ebf5e18964c6323b180ff8fa26fd
-
SHA1
bceedaeb57adf1cbe11027aade3ddffc70ad07f9
-
SHA256
28dac78fdc3c9bbf29420476129dd4fb8da8a39de4ffea5a25b1ca973702ceda
-
SHA512
b06a5e0c094669b7ae7ed82540fd3e2cd5edfada36a2525cd98da3d100b532e678e80a837a0f114a4bf4c3e7ed3277b9e10878cac9b5293862d8f725daed63bc
-
SSDEEP
196608:c694QeYehmAv8JLWtHkhqZV8fm2nuXPkBh3DXMpeFs2VIFuYHZ1a9bVi/Qe:cEd2p0xhgZiefs/DXnsBuYHZsbgo
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Loads dropped DLL
-