General
-
Target
4e52b55a84fd16c5ad7b37ed8ae1211f213390810efb8297b553827124b6bec7
-
Size
79KB
-
Sample
241116-f6dv8szlgt
-
MD5
dfbafdb89f97fb33bfff7c7275ed23d2
-
SHA1
237e915f08526de9daf35873defe572d539ec14d
-
SHA256
4e52b55a84fd16c5ad7b37ed8ae1211f213390810efb8297b553827124b6bec7
-
SHA512
d93b0826f999a6896c21b6f0c6313082a86cd4d0494ac9c9dba1b63e6dcf148c02ac9f57241b5848b97ebcf02c0a8a1a3359beb9f433c862149b8446ec818634
-
SSDEEP
1536:5bqmt7l50EldQu6/zohGFGLUcBT86W+yxSPyYR0iXQBYSOXClT:5bqE7vfm/oBTrW+EzYR0CUbOCB
Static task
static1
Behavioral task
behavioral1
Sample
4e52b55a84fd16c5ad7b37ed8ae1211f213390810efb8297b553827124b6bec7.docm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4e52b55a84fd16c5ad7b37ed8ae1211f213390810efb8297b553827124b6bec7.docm
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/reverse_tcp
192.168.77.130:4444
Targets
-
-
Target
4e52b55a84fd16c5ad7b37ed8ae1211f213390810efb8297b553827124b6bec7
-
Size
79KB
-
MD5
dfbafdb89f97fb33bfff7c7275ed23d2
-
SHA1
237e915f08526de9daf35873defe572d539ec14d
-
SHA256
4e52b55a84fd16c5ad7b37ed8ae1211f213390810efb8297b553827124b6bec7
-
SHA512
d93b0826f999a6896c21b6f0c6313082a86cd4d0494ac9c9dba1b63e6dcf148c02ac9f57241b5848b97ebcf02c0a8a1a3359beb9f433c862149b8446ec818634
-
SSDEEP
1536:5bqmt7l50EldQu6/zohGFGLUcBT86W+yxSPyYR0iXQBYSOXClT:5bqE7vfm/oBTrW+EzYR0CUbOCB
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-