General
-
Target
c913f34de4e871f2f89303313925a1964f5f44c4311853af954331e6521afdb7
-
Size
42KB
-
Sample
241205-1fmqnszjhl
-
MD5
8f9a41380b558c9f03460832d769fa50
-
SHA1
fa34d377cac8890459c8d5ca386d0dc3d55bc5fc
-
SHA256
c913f34de4e871f2f89303313925a1964f5f44c4311853af954331e6521afdb7
-
SHA512
bf7539f9f19b6256f87dca703588099cafed82a2c1046e6c353d08f7efa587ccecb8af69f143b92e1b7b7b7c3d9e957b51601fd328027cff10f96c65fff1f302
-
SSDEEP
384:CF8iS8px8SMDigomDttBXZtFyTz+pek/iuE/H7kyzQ/+DQCgN0jFp/:C3y1ZtFi+pekqRP5W+K6p/
Behavioral task
behavioral1
Sample
c913f34de4e871f2f89303313925a1964f5f44c4311853af954331e6521afdb7.doc
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c913f34de4e871f2f89303313925a1964f5f44c4311853af954331e6521afdb7.doc
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/download_exec
http://192.168.8.128:80/6Xlb
- headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1)
Targets
-
-
Target
c913f34de4e871f2f89303313925a1964f5f44c4311853af954331e6521afdb7
-
Size
42KB
-
MD5
8f9a41380b558c9f03460832d769fa50
-
SHA1
fa34d377cac8890459c8d5ca386d0dc3d55bc5fc
-
SHA256
c913f34de4e871f2f89303313925a1964f5f44c4311853af954331e6521afdb7
-
SHA512
bf7539f9f19b6256f87dca703588099cafed82a2c1046e6c353d08f7efa587ccecb8af69f143b92e1b7b7b7c3d9e957b51601fd328027cff10f96c65fff1f302
-
SSDEEP
384:CF8iS8px8SMDigomDttBXZtFyTz+pek/iuE/H7kyzQ/+DQCgN0jFp/:C3y1ZtFi+pekqRP5W+K6p/
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-