Behavioral task
behavioral1
Sample
9b6aa733b94e2492b29724fa1fe2f03bcd8d36f8c81d0aef3ee4c5fcd442015e.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9b6aa733b94e2492b29724fa1fe2f03bcd8d36f8c81d0aef3ee4c5fcd442015e.exe
Resource
win10v2004-20241007-en
General
-
Target
9b6aa733b94e2492b29724fa1fe2f03bcd8d36f8c81d0aef3ee4c5fcd442015e
-
Size
7KB
-
MD5
ab9e62b6ea1d0b944732e29b9d67cddd
-
SHA1
d548e3d3f0cc3ceebb22ea55423e892ed9cc4cec
-
SHA256
9b6aa733b94e2492b29724fa1fe2f03bcd8d36f8c81d0aef3ee4c5fcd442015e
-
SHA512
b6c35e67bf5e684f9d1eaed9d8996c259f5a957d8b6cd5cf3b23cfa65003fa949d9dd0251e6dcdd0adc3f767eb31768f0cbae5b4f43258ea3e245fca931fce50
-
SSDEEP
24:eFGStrJ9u0/65znZdkBQAVXDch7wKZqBeNDMSCvOXpmB:is08fkBQnhMjSD9C2kB
Malware Config
Extracted
metasploit
metasploit_stager
88.217.167.173:80
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b6aa733b94e2492b29724fa1fe2f03bcd8d36f8c81d0aef3ee4c5fcd442015e
Files
-
9b6aa733b94e2492b29724fa1fe2f03bcd8d36f8c81d0aef3ee4c5fcd442015e.exe windows:4 windows x64 arch:x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kiwc Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE