General
-
Target
2024-11-14_d6c4530793537e06d81ed8d4025bf372_karagany_mafia
-
Size
2.9MB
-
Sample
241114-mz3pcasjbk
-
MD5
d6c4530793537e06d81ed8d4025bf372
-
SHA1
749eeb5bc7456594354cd587cc614e55e637cc3d
-
SHA256
42ae60f29d5f12e14056c8a043556fb53bb1fafd33693135105d6beee3d494db
-
SHA512
577627978c642af4a38c4d10d3ee9596708178c8e936d869c8f1ede1bf6fcbdf91df82e74ba7fb3d6b3c6c2667dab87a0737d78afbec613693586185c1b0e908
-
SSDEEP
49152:otg7ETQsdSKNQ5bzPQzqhwCdxKKTUqZIt7tTt+YsaGGCj/TeDeJQxHEExLz4k8:mtdSOQ5XImaKZUga7tMFGNDtNEoJ8
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-14_d6c4530793537e06d81ed8d4025bf372_karagany_mafia.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2024-11-14_d6c4530793537e06d81ed8d4025bf372_karagany_mafia.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/download_exec
http://105.112.178.164:80/SRho
Targets
-
-
Target
2024-11-14_d6c4530793537e06d81ed8d4025bf372_karagany_mafia
-
Size
2.9MB
-
MD5
d6c4530793537e06d81ed8d4025bf372
-
SHA1
749eeb5bc7456594354cd587cc614e55e637cc3d
-
SHA256
42ae60f29d5f12e14056c8a043556fb53bb1fafd33693135105d6beee3d494db
-
SHA512
577627978c642af4a38c4d10d3ee9596708178c8e936d869c8f1ede1bf6fcbdf91df82e74ba7fb3d6b3c6c2667dab87a0737d78afbec613693586185c1b0e908
-
SSDEEP
49152:otg7ETQsdSKNQ5bzPQzqhwCdxKKTUqZIt7tTt+YsaGGCj/TeDeJQxHEExLz4k8:mtdSOQ5XImaKZUga7tMFGNDtNEoJ8
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Loads dropped DLL
-